Privacy & Cookie Policy
Most of what we hold, you gave us - a name, a phone number, the size of your party. The rest we collect as you use the site. This policy explains all of it: what we collect, why, who else sees it, and the rights you have over it.
It covers this website and our three restaurants, and it applies whether you book a table, order for collection or delivery, join our mailing list, or simply come to look at the menu.
Who we are
The London Dough Co Ltd is the data controller responsible for the personal data described in this policy. We run three neighbourhood restaurants in south London.
A company registered in England and Wales, company number 14595468, registered office 12 Balham Station Road, London SW12 9SG.
Brixton, 354 Coldharbour Lane, SW9 8QH · Ladywell, 40 Ladywell Road, SE13 7UZ · South Norwood, 1 Station Road, SE25 5AH.
Data enquiries: info@mammadough.co.uk
The data we collect
What we hold depends on how you deal with us. It may include:
Information you give us directly. When you book a table, enquire about a party or private hire, or book a pizza class, we collect your name, email address, phone number, and anything you tell us about the occasion, your party size, or your dietary requirements.
Information collected automatically. When you visit this website we collect technical information such as the pages you look at, how you arrived, and your general location and device type. Our own analytics does this without using cookies. Advertising measurement, described in section 08, does use cookies, and it runs only if you agree to it.
Information from the platforms we use. Bookings made through our reservation partner, orders placed for collection or delivery, mailing list sign-ups, and messages sent to us on social media reach us through those services, along with the details they pass on.
Security records. We log failed attempts to sign in to this website, including the IP address they came from, so we can protect the site from attack.
Dietary and allergy information is the only sensitive detail we ask for, and we use it solely to serve you safely. We do not ask for any other special category data.
How we use it, and our lawful basis
Under UK GDPR we must have a lawful basis for using your data. Ours are as follows:
To hold your table and serve you. Lawful basis: performance of a contract, or steps taken at your request before one.
To answer enquiries about parties, classes and private hire. Lawful basis: our legitimate interest in replying to people who contact us.
To send you news, offers and menu updates. Lawful basis: your consent, which you can withdraw at any time.
To run our restaurants and this website well. Lawful basis: our legitimate interest in a safe, functional business.
To measure our advertising. When we are running ads and you have agreed to advertising cookies, we use Meta and Google conversion tracking to see which ads bring people to the site. Lawful basis: your consent, which you can withdraw at any time.
To meet our legal and regulatory obligations, including food safety and accounting records. Lawful basis: compliance with a legal obligation.
We do not use your data to make automated decisions that produce legal or similarly significant effects about you.
Bookings and tables
Table bookings on this site are taken through OpenTable, which runs the booking panel on each restaurant page. When you book, the details you enter go to OpenTable and to us, and OpenTable handles them under its own privacy policy as well as ours.
Click and collect and delivery orders are placed through Toast and Deliveroo, which take your order and payment details under their own privacy policies and pass us what we need to make and hand over the order. Our mailing list is also run through Toast - the newsletter links in our footer take you to their sign-up page. Party enquiries, private hire and pizza classes are handled by email with the restaurant concerned.
How we share it
We do not sell your personal data, and we never will.
We share it only with the providers who help us operate, and only as far as needed: our reservation platform, our click and collect, mailing list and delivery partners, our card payment provider, our website and email hosts, our analytics provider, the advertising platforms we measure campaigns with, and our professional advisers. Each acts under contract and on our instructions, or under its own published data policy.
We may also disclose data where the law requires it, or to protect our rights, our people, or the safety of others. Where a provider processes data outside the United Kingdom, as OpenTable, Toast, Meta and Google do, we rely on the safeguards recognised under UK data protection law.
How long we keep it
We keep personal data only as long as we have a reason to.
Booking records are kept for a limited period after your visit. Enquiry correspondence is kept while we are in touch and for a reasonable period afterwards, then deleted. Mailing list details are kept until you unsubscribe. Records we must keep by law, such as accounts, are held for the period the law sets.
Your rights
Under UK data protection law you have the right to:
access the personal data we hold about you;
ask us to correct data that is wrong or incomplete;
ask us to delete your data, where there is no overriding reason to keep it;
object to, or ask us to restrict, our use of your data;
withdraw consent at any time, where we rely on it;
ask for a copy of your data in a portable format.
To exercise any of these, email info@mammadough.co.uk. We will reply within the time the law allows, normally one month.
If you think we have handled your data poorly, we would like the chance to put it right. You also have the right to complain to the ICO at ico.org.uk.
Cookies and tracking
Cookies are small files placed on your device that help a website work and help its owners understand how it is used.
These are the cookies this site uses:
| WHAT IT IS FOR | SET BY | |
|---|---|---|
| Necessary | Keeping the site working, and remembering your cookie choices | Us and our host |
| Functionality | The booking panel on each restaurant page | OpenTable |
| Measurement | Understanding how the site is used | Us - no cookies used |
| Advertising | Measuring whether an ad brought you here | Meta, Google |
Advertising. From time to time we advertise on Facebook, Instagram and Google. While a campaign is running, and only if you agree through our cookie banner, Meta and Google set cookies that tell us whether an ad led to a booking or an order. They are not on the rest of the time, and nothing you do on this site is shared with them unless you have agreed.
Changing your mind. You can accept or refuse non-essential cookies when you first arrive, and change that at any time using the cookie settings button in the corner of every page.
The booking panel. Our booking is provided by OpenTable, which sets its own cookies when the panel loads. If you would rather it did not, every restaurant takes bookings by phone.
Your browser. You can block or clear cookies in your browser settings. That gives you no control by category, and switching some off may affect how the site works, including the booking panel.
External links
This site links out to other services, including our booking platform, Toast, Deliveroo, and the social accounts where we post. We are not responsible for their privacy practices, and we encourage you to read the privacy policy of any site you visit.
Changes to this policy
We may update this policy from time to time. When we make a material change we will update the date at the top of this page. We encourage you to look it over occasionally.
Contact
For any question about this policy or your personal data, email info@mammadough.co.uk, or speak to a manager at any of the three restaurants.