Privacy Policy

Bem Brasil Restaurants – Privacy Policy

Last updated: 20/11/2025

Bem Brasil Restaurants Ltd (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information in a fair, transparent and secure way. This Privacy Policy explains what personal data we collect, how we use it, your rights under UK data protection law, and how you can contact us.

Bem Brasil Restaurants Ltd
Registered Number: 06515257
Registered Office: 58 Lever Street, Manchester, M1 1FJ
Website: https://www.bembrasilrestaurants.com
Email: headoffice@bembrasilrestaurants.com

This policy applies when you visit our website, make a booking, contact us, buy gift vouchers, join our mailing list, or use any of our services.

1. What Personal Data We Collect

We may collect and process the following types of personal data:

1.1 Information you provide directly

Name
Email address
Phone number
Booking details (date, time, party size, location, dietary notes if provided)
Gift voucher information (recipient details, purchase details)
Payment information (processed securely by third-party providers – we do not store card numbers)
Contact preferences
Messages or enquiries you send us

1.2 Data collected automatically

IP address
Device type, operating system, browser
Pages viewed, interactions, referring URLs
Cookie identifiers and analytics data

1.3 Information from third parties

Booking partners (e.g. booking widget providers)
Payment processors (e.g. Stripe)
Email marketing platforms (e.g. Mailchimp, if used)

We do not buy or sell personal data.

2. How We Use Your Personal Data

We use your personal data for the following purposes, under lawful bases allowed by the UK GDPR:

2.1 To provide our services

(Legal basis: performance of a contract)

Handling restaurant bookings
Sending booking confirmations, updates or reminders
Processing gift voucher purchases
Responding to your enquiries

2.2 For our legitimate business interests

(Legal basis: legitimate interests)

Improving website performance and customer experience
Understanding how visitors use our website
Ensuring website security
Keeping internal business records
Fraud prevention and security monitoring

2.3 For marketing (only with your consent)

(Legal basis: consent)

Email newsletters
Promotions, offers and updates
You can withdraw consent at any time by clicking “unsubscribe” or emailing us.

2.4 To comply with legal obligations

(Legal basis: legal obligation)

Tax, accounting and auditing
Responding to lawful requests from authorities

3. Sharing Your Personal Data

We only share your information when necessary and with trusted partners who help us operate our business. These include:

Booking system providers
Payment processors (e.g. Stripe)
Email marketing platforms
Website hosting providers
IT and security service providers

All partners are required to process your data securely and only according to our instructions.

We do not:

Sell your personal data
Share your data with advertisers
Allow third parties to use your information for their own marketing

Some partners may be located outside the UK/EEA. In these cases, we ensure they meet UK GDPR transfer requirements (e.g. adequacy decisions, standard contractual clauses).

4. Cookies & Analytics

Our website uses cookies to:

Make the site function properly
Remember your preferences
Analyse how the site is used
Improve performance
Help with booking reliability
Support security features

We also use Google Analytics for anonymous statistical reporting.

You can control or block cookies in your browser settings at any time. For more information, visit:
https://www.allaboutcookies.org/

5. How We Protect Your Data

We use technical and organisational measures to keep your data secure, including:

SSL encryption on all website pages
Secure servers and firewalls
Access controls and staff training
Regular security monitoring
No local storage of full payment card details
Data minimisation and retention limits

Despite this, no internet transmission is completely secure. We take reasonable steps but cannot guarantee absolute security.

6. Data Retention

We keep your personal data only for as long as necessary for the purposes described above.

Typical retention periods:

Booking records: up to 24 months
Gift voucher transaction data: 6 years (legal requirement)
Email marketing: until you unsubscribe
Website analytics: typically 14–26 months (Google default)

After retention periods expire, data is securely deleted or anonymised.

7. Your Rights Under UK GDPR

You have the following rights:

Right of access – request a copy of your data
Right to rectification – correct inaccurate information
Right to erasure – request deletion of your data
Right to restrict processing
Right to data portability
Right to object to certain processing
Right to withdraw consent at any time
Right to complain to the ICO (www.ico.org.uk)

To exercise your rights, email: headoffice@bembrasilrestaurants.com

We will respond within one month.

8. Links to Other Websites

Our website may include links to third-party sites such as booking systems, payment processors, social media or partners.
We are not responsible for the privacy practices of these websites.

We recommend you read their privacy policies when visiting them.

9. Children

Our website is not intended for individuals under the age of 16.
We do not knowingly collect personal data relating to children without parental consent.

10. Changes to This Policy

We may update this Privacy Policy periodically.
Any changes will be published on this page with an updated revision date.

Continued use of our website after changes are made indicates acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, contact:

Data Protection Manager
Bem Brasil Restaurants Ltd
58 Lever Street
Manchester
M1 1FJ
Email: headoffice@bembrasilrestaurants.com