Privacy Policy

Last Updated: September 2026

Kalis Ltd (trading as La Casita) is committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, use, and look after your personal information when you visit our website, make a table reservation, or dine with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Detail	Information
Restaurant Name:	La Casita
Company Name:	Kalis Ltd
Company Registration No.:	06700621 (Registered in England and Wales)
Registered Address:	4 Beaufort Parklands, Railton Road, Guildford, Surrey, England, GU2 9JX
Data Protection Contact:	Management Team
Email Address:	guildfordlacasita@gmail.com

For the purposes of the UK GDPR, Kalis Ltd is the data controller responsible for your personal data.

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal information depending on how you interact with us:

• Identity & Contact Data: First name, last name, title, telephone number, and email address.
• Reservation Data: Date and time of your visit, party size, seating preferences, and special occasion details.
• Dietary & Health Data (Special Category Data): Information regarding food allergies, intolerances, or specific dietary requirements you voluntarily share with us to ensure your safety while dining.
• Transaction & Financial Data: Payment details used to settle bills, pay booking deposits, or process cancellations.
• Technical & Usage Data: Internet Protocol (IP) address, browser type and version, time zone setting, and browsing patterns when you visit our website.
• Marketing & Communications Data: Your preferences regarding receiving newsletters, special menu updates, or event invitations from us.

3. Lawful Basis for Processing

We process your data under the following legal frameworks:

1. Contractual Necessity: To take and manage your table reservations, process deposits, and serve you at our restaurant.
2. Consent / Health & Safety: Where you provide health or allergy information, we process this with your explicit consent to safeguard your physical well-being.
3. Legal Obligation: To maintain accurate financial and business records for taxation and regulatory purposes (such as HMRC compliance).
4. Legitimate Interests: To run our business efficiently, manage customer queries, prevent fraud, and improve our services and dining experience.

4. How We Use Your Personal Data

We use your information specifically to:

• Confirm, manage, and send reminders for your table bookings.
• Cater safely to your food allergies and dietary preferences.
• Process payment transactions, booking deposits, or gift vouchers.
• Respond to customer service inquiries, private dining requests, or feedback.
• Send you news about upcoming events, seasonal menus, and promotions (where you have opted in).

5. Sharing Your Data

We respect your privacy and do not sell your personal data. We only share information with trusted third parties strictly necessary for operating our business:

• Reservation Systems: Third-party online booking management platforms used to process table reservations.
• Payment Processors: Secure merchant platforms used to handle deposit payments and card transactions.
• IT & Web Services: Cloud hosts, website administrators, and email communication software providers.
• Professional Advisers & Regulators: Legal advisers, accountants, or UK regulatory authorities where legally required.

6. Data Security & Retention

We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

• Retention Period: We retain your information only for as long as necessary. Reservation details are kept for operational purposes, while transaction and accounting records are legally retained for 6 years following the financial year they relate to.

7. Your Legal Rights

Under UK data protection laws, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of any inaccurate or incomplete information.
• Request erasure of your personal data (where it does not conflict with our legal obligations to retain records).
• Withdraw consent at any time (e.g., opting out of marketing emails or withdrawing consent for storing allergy notes).

To exercise any of these rights, please contact us at guildfordlacasita@gmail.com.

8. How to raise a data protection concern or complaint

If you have any questions, concerns, or wish to make a formal complaint about how we handle your personal data, you have the right to raise this directly with us.

How to contact us:

Please email us directly at guildfordlacasita@gmail.com.

Our process: We will formally acknowledge your complaint within 30 days of receipt and work to investigate and resolve your concern without undue delay.

Escalating to the Information Commissioner’s Office (ICO)

If you remain dissatisfied with our final response, or if we fail to respond to you within the statutory timeframe, you retain the right to lodge a complaint with the UK data protection regulator:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

Website: www.ico.org.uk