Skip to main content

PRIVACY POLICY

Who we are

We, Barburrito Group Limited (“Barburrito”), respect the right to privacy of every individual who visits our site, mobile site or apps (“Digital Channels”), or who otherwise receives services from us or who participates in activities connected with Barburrito. The purpose of this privacy policy is to inform you on how we collect and use your data when you visit our Barburrito restaurants, access our website or use our online services including our app.

At Barburrito, we are committed to protecting your personal information. As such, this policy also aims to inform you on what your rights are in relation to your data and how you can exercise these rights.

We at Barburrito are the data controller of the personal data which we collect from you at Barburrito restaurants, and when you use the Barburrito website and associated apps.

Barburrito Group Limited is registered in England and Wales with (company number 12883632 and VAT number 340377862)

Our registered office is 5-7 Marshalsea Road, London SE1 1EP.

  1. This Privacy Policy explains:
  • what information we collect and how we use it
  • how we protect your information
  • the purpose and legal basis for the information we collect and use
  • special offers and promotions
  • sharing and disclosure of personal information
  • collection of information by third party sites
  • your rights regarding your personal information
  • retention of personal information
  • cookies
  • disabling / enabling cookies
  • revisions to this Privacy Policy
  • how to contact us.
  1. WHAT PERSONAL INFORMATION DO WE COLLECT AND HOW WE WILL USE IT?

Whenever you communicate with us, including when you:

  • visit our website located at https://barburrito.co.uk/;
  • order online or pay your bill;
  • use one of our apps;
  • use the Free Wi-Fi service in one of our restaurants or;
  • provide your details to show that you qualify for certain discounts.

(whether you do this directly or through one of our partners or sub-contractors), we collect, store and use your personal data in various ways.

What information is collected and how do we obtain it?

Personal Information

In the normal course of our business, we will collect personal information relating to you, such as your name, address, phone number, e-mail address and date of birth. Whenever you communicate with us or one of our partners or sub-contractors, (including by email, phone, SMS, via the website, our apps or otherwise), for example, in the following situations:

  • when you order online or by telephone, dine in, pay your bill, or purchase a voucher for use in one of our restaurants;
  • When you book or order through one of our partners (including our delivery partners), they may pass your personal information (including your name, email address, telephone number and details of your booking) onto us;
  • when you register for Barburrito rewards, vouchers or other offers, subscribe for e-mail newsletters and update services (we may also ask you your age, your postcode, your marketing preferences and other relevant information and may use this to tailor offers appropriate to you);
  • when you want to show that you qualify for certain discount offers (e.g. our NHS or student discounts or promotions), we may ask for your student or NHS ID or ask for your first name, surname, date of birth, email address, college or university (for students) or medical institution and position held (for NHS staff) to verify that you qualify;
  • when you set up an account with Barburrito, your registration details);
  • when you use our free Wi-Fi service (we may also ask you your age so we can ensure we meet any minimum legal age limits);
  • the Barburrito App provides services based on your location; if you wish to switch off location services, you will need to change the settings on your device;
  • if you choose to participate in market research initiatives or promotional events, complete a questionnaire or competition entry form;
  • we operate CCTV in all our restaurants – please consult the signage in the restaurant for more details; or
  • if you submit a job application form and/or CV, or otherwise seek employment with us, we will collect your personal information (including employment history and qualifications, photo ID, and reference contact details and, where required, criminal records checks). You may also choose to give us certain details about a medical condition or disability, religious belief or other sensitive data relevant to your application for employment. We also collect ethnicity data (on a voluntary basis) in order to monitor our adherence to equal opportunities and anti-discrimination laws.

Some of the personal information that you provide may include sensitive personal information, such as health-related information when you make a complaint or suffer an incident in one of our restaurants (see above). We need this information to investigate the complaint or incident and (if necessary) report it to health or other authorities, law enforcement agencies, our insurers and any suppliers who may be involved. We may also collect information about the names of others in your party, and any other information needed for the purposes of the investigation.

Information is also collected automatically using cookies and other similar tracking technologies. Whenever you interact with our website (including when you browse the website or download information from it) we collect and store certain types of information about your visit using cookies. We describe how we use cookies and how you can disable them below. The information we collect using cookies includes information which identifies the computer you use to access the website, the date and time of the visit and the pages visited.

Information may be collected automatically when you use the Free Wi-Fi service in one of our restaurants in order to produce aggregated and anonymous reports concerning the use of the Free Wi-Fi service. These reports will not personally identify you. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, operating system, browser-type, broad geographic location (e.g. country or city-level location) and other technical information.

Please note that Free Wi-Fi is not available for persons under 18 years old. If you are under 18 years old, you will need to ask a parent or other responsible adult to sign in for you.

 

  1. PURPOSE AND LEGAL BASIS FOR THE INFORMATION WE COLLECT AND USE

We know how important your personal information is so we will only ever collect and use your personal information for a lawful reason relating to our business. Generally, this means that we will use your personal information:

  • to carry out a contract with you or because you have asked us to take specific steps, for example, ordering food, arranging delivery or collection, applying a discount, processing payment of your bill, allowing you to connect to free Wi-Fi at our restaurants, investigating and handling complaints or considering your CV or employment application;
  • because we have to comply with the law and applicable regulations,
  • where you give us your consent to process your personal data such as providing you with special offers, discounts, news and information about us which may be of interest to you (we think you’ll love receiving these but, if not, you can opt out at any time);
  • for legitimate legal purposes such as updating and maintaining our records, retaining your details so you can log in quicker in the future, preventing or detecting fraud or abuses of our website or our Free Wi-Fi service, issuing vouchers for use in our restaurants, enabling third parties to carry out technical, logistical or other functions on our behalf to make our apps, website and Digital Channel more useful to you; for personalised service and communications, targeted and online behavioural advertising: analytics and profiling of guests; monitoring website usage and offer performance / conversion; guest surveys and data analytics to understand how we are doing, whether we are meeting our guests’ needs and seeking ways we can improve our products, services, communications and offers; the administration of our Digital Channels; the administration and management of our competitions, promotions and prize draws – you should check the applicable terms and conditions of the competition, promotion or prize draw for further information; for obtaining customer feedback (including through customer satisfaction surveys);
  • where required by external parties we deal with such as our insurers (e.g. where there has been an accident or incident in one of our restaurants), suppliers (if there has been a food-related incident) or where necessary for the establishment, exercise or defence of any legal claims.
  1. SPECIAL OFFEERS, PROMOTIONS AND DIRECT MARKETING

We would like to keep you informed of Barburrito news and offers by email and other electronic means. When you sign up to our Barburrito app, we will use the data we collect from you to send you Barburrito specific marketing communications by email. You can tell us at registration if you do not wish to receive these and you may opt out of such communication or change your marketing preferences at any time by unsubscribing. If you no longer want to receive such special offers, discounts, news and information, you can either:

  • simply click on “unsubscribe” at the foot of the email or text and we will take you off our marketing and promotions list or
  • if you have registered for Barburrito offers, rewards or vouchers, log into your account on the Barburrito appand change your preferences at any time.
  1. SHARING YOUR PERSONAL INFORMATION WITH THIRD PARTIES

We want you to be clear on what we do with your personal information. We will keep your personal information secure and never sell your personal information to anyone. We do use sub-contractors to carry out certain functions on our behalf and occasionally have to disclose your personal information (for example, to provide specific services to you or dealing with insurers or public authorities like the police). This is described more fully below:

Sub-contractors, suppliers and agents: from time to time we employ other companies to perform functions on our behalf including taking orders and fulfilling order deliveries, designing and sending guest communications, providing guest vouchers, analysing data, providing elements of our IT or back-up systems, providing marketing assistance, processing payments, improving our services and providing customer service. They may have access to personal information needed to perform their functions but are not permitted to use it for other purposes and cannot modify, disclose, or erase your data without our instructions.

Legal reasons: we may disclose information about you (i) if we are required to do so by law or regulation (e.g. food safety), (ii) in response to a request from law enforcement authorities or other government officials, or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm, to enforce or protect any of our rights, property or safety (or those of our customers), and/ prevent any financial loss in connection with an investigation of suspected or actual illegal activity.

Fraud / Credit Risk: where necessary to prevent fraud or reduce credit risk, we may exchange your personal information with other companies and organisations.

Business transfers: in any corporate transactions (e.g. buying or selling of businesses, stores or business units) personal information is generally one of the transferred assets. We reserve the right to transfer any information we have about you in the event we sell or transfer all or a portion of our business or assets, however that would always be under conditions of strict confidentiality and limited to the specific purpose.

Sending data outside the UK or of Europe: we generally do not transfer your personal information to countries outside the UK and the European Union. However, some of our appointed carriers, sub-contractors, suppliers and agents may transfer, use or store data in other countries. Where this is the case, they are obliged to ensure that there is equivalent protection for your personal information as would be the case within the UK and the European Union. We have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Policy. In absence of an adequacy decision, these safeguards may include:

  • implementing the European Commission’s Standard Contractual Clauses for transfers of personal information by a data controller established in the United Kingdom to a processor established in a third country which does not offer adequate level of protection; or
  • engaging with third parties who participate in the EU-US Data Privacy Framework (“EU-US DPF”) and the UK Extension to the EU-US Data Privacy Framework.

Analytics and profiling: in order to offer you a more personalised experience in your interactions with us, information collected through one source may be combined with information we obtain through other sources. This may include information that allows us to identify you across multiple devices through which you access our websites. We may also supplement the information we collect with information obtained from other parties, including our business partners and other third parties to create customised profiles about you. Examples of how we may use this information include using your data to help us to improve your experience using our website, to present you with options tailored to your preferences and for targeted advertising purposes.

Our Digital Channels may contain links to other websites, mobile sites and apps and certain services provided by third parties (e.g. Wi-Fi services available in Barburrito stores) are available for use by customers. Please note this privacy policy only applies to our channels and services. When you link to other websites, mobile sites, or apps, or use services provided by third parties (e.g. Wi-Fi services available in Barburrito stores) we are not responsible or liable for them. You should read the privacy policies for those linked sites, apps or services before you submit any personal information to them.

Cookies

Cookies are little files that our website puts on your device to make visits quicker, easier, and more relevant. Some cookies are essential for our website to work, and others remember things about you to give you a better, more enjoyable online experience.

We may use web analytics programmes to log and analyse the information collected by cookies. This information, together with similar information from other users, helps us to:

  • Compile anonymous statistics around how our site is used to help improve our service (including for example information on the type of web browser that you are using, the operating system that your computer uses, and (where applicable) the link that you followed to get to our site);
  • Speed up your searches; and
  • Recognise you when you return to our site.

For more information about cookies, please visit www.allaboutcookies.org or refer to the documentation provided with your web browser software.

You can set your browser not to accept cookies and www.allaboutcookies.org tells you how to remove cookies from your browser. However please note that certain features of our site require cookies in order to function.

  1. SECURITY

Barburrito takes the security of any personal information we hold very seriously.

Where necessary, and in common with other websites and apps, we use SSL (Secure Sockets Layer) encryption to ensure that personal information provided to us is not visible to anybody else when in transit between your computer and our servers.

In addition, our web servers are housed behind a secure firewall that prevents access to our databases by unauthorised users. All our servers are housed in a secure environment with high levels of physical security.

However, the transmission of information via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our site: any transmission is at your risk. Once we have received your information, we will handle it in accordance with Data Protection laws and our usual practices.

  1. YOUR RIGHTS

You have certain rights regarding your personal data. To action any of these, please contact us at hola@barburrito.co.uk. A list of these rights and how you may exercise them has been included below:

  • Right to access personal data: You have the right to access your personal data at any point and may make a request to do so either verbally or in writing. We will process your request without undue delay and, at the latest, within 1 month, unless your request is complex or numerous in which case, we may take up to 3 months, but we will inform you within 1 month if this is the case. Please note that there are certain limited exceptions to your right to access personal data such as if it would involve disclosing the personal information of another person who has not consent to such disclosure.
  • Right to data portability: You have the right to data portability, meaning you may request to receive your personal data (under certain circumstances) in a standard use, machine readable format.
  • Right to rectification of personal data: You have the right to request us to rectify any inaccurate or incomplete personal data we may have on you. If you make this request, we will update your personal data with the correct information provided.
  • Right to object, restrict and erasure of personal data: You have the right to restrict how your data us being used, and the right to request us to delete your personal data under certain circumstances. Please note that there are exceptions such as where we need to retain personal information for legal reasons (e.g. where necessary for the establishment, exercise or defence of any legal claims) or where we have another legitimate business reason for retaining personal information.

 

  • Right to withdraw consent: In any circumstances in which we process data based on consent, you may withdraw your consent at any time.

 

  • Right to be informed: You have the right to be informed about how we collect, use and retain your data, which is why we have set out this information within this policy. If you would like further information regarding your data, you may contact us at any time.
  1. RETENTION OF PERSONAL INFORMATION

We will keep your data for as long as necessary to carry out the purpose for which we collected it. If we have had no online contact from you (e.g. logging onto free Wi-Fi, using your Barburrito rewards, ordering vouchers or taking up special offers and promotions) for 3 years, we may delete your personal information.

If at any time you wish to opt-out of receiving special offers and promotions, restrict our processing of your personal information, or ask us to erase your personal information, please see Your Rights regarding your personal information above.

  1. YOUR RIGHT TO COMPLAIN TO A DATA PROTECTION AUTHORITY

You also have the right to lodge a complaint with the data protection authority. The relevant authority for the UK is the Information Commissioner’s Office (ICO). If you wish to file a complaint with the ICO, you may find the following information helpful: https://ico.org.uk/make-a-complaint/

  1. CHANGES TO OUR PRIVACY POLICY

We keep our privacy policy under regular review and we will place any updates on this webpage. This privacy policy was last updated in January 2024.

  1. CONTACT US

If you require further information or have any questions regarding this privacy policy, then please email hola@barburrito.co.uk.