Privacy Notice

Who is the controller

turkishrestaurants.co.uk (the "Site") and the associated Turkish Restaurants UK sites are operated by [COMPANY NAME] (company number: [COMPANY NUMBER]), registered office: [REGISTERED ADDRESS]. For the purposes of this notice, [COMPANY NAME] is the "controller" under UK GDPR and the Data Protection Act 2018.

What we collect, why, and our lawful basis

Contact / lead forms

When you submit a contact or lead form on the Site, we collect your name, email, phone (optional), town/council and message. We process this on the basis of performance of a contract where your enquiry is a pre-contractual step, and otherwise on the basis of our legitimate interest in responding to your enquiry. We retain this data for 24 months, after which it is deleted or anonymised.

Restaurant claim requests

When a restaurant operator contacts us to claim a listing, we process their contact details on the basis of our legitimate interest in verifying identity and processing the request.

Location searches (near-me sites)

When you use the near-me finder, coordinates shared via your browser's geolocation permission, or a postcode you enter, are sent to our server solely to return results to you. This location data is never stored or logged. Postcode lookup is performed via postcodes.io, a free UK public-sector service.

Server logs

Our hosting provider, Vercel, keeps standard short-retention server access logs (e.g. IP address, timestamp, requested URL) for security and fault diagnosis. These logs roll over automatically after a short period.

Analytics

We may use privacy-friendly, cookieless analytics (such as Vercel Analytics) to understand overall site usage. Where used, this does not identify you individually and does not use cookies for cross-site tracking.

Our processors and international transfers

• Vercel — hosting and content delivery.
• Supabase — database hosting (EU, Ireland region).
• Resend — delivery of email generated by form submissions.
• Google Maps Platform — enrichment of restaurant directory data; this is business data, not personal data belonging to visitors.

Data processing agreements (DPAs) are in place with these providers. Where your data is transferred outside the UK/EEA, this only happens under safeguards required by UK GDPR (for example, Standard Contractual Clauses).

Business data in our directory

Directory listings are compiled from public sources: the Food Standards Agency (FSA) Food Hygiene Rating Scheme open data (licensed under the Open Government Licence v3.0), Google Business Profile information, and businesses' own websites. If you are a business owner and would like to correct or request removal of information in a listing, contact us using the details below. Processing this kind of data about sole traders relies on our legitimate interest in maintaining an accurate, current public directory.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Request restriction of processing
• Request data portability
• Object to processing

To exercise any of these rights, email us at [CONTACT EMAIL]. We aim to respond within 30 days. If you are unhappy with our response, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ico.org.uk).

Children

The Site is not aimed at, and we do not knowingly collect data from, anyone under 18.

Changes to this notice

We may update this notice from time to time; the current version always appears on this page with the date shown above.

Contact us

For privacy questions, email [CONTACT EMAIL].