Privacy policy

1. Who we are

Elif Turkish Grill and Bar is a restaurant and bar located at 22 Castle Street, Liverpool, L2 0NE.

For the purposes of UK data protection law, the business operating Elif Turkish Grill and Bar is the data controller responsible for the personal information described in this Privacy Policy.

If you have any questions about how we use your personal information, you can contact us:

• Email: info@elifcastlest.co.uk
• Telephone: 0151 666 0050
• Address: 22 Castle Street, Liverpool, L2 0NE

2. What personal information we collect

The information we collect depends on how you interact with Elif Turkish Grill and Bar.

Reservations

When you make a reservation, we may collect:

• your name;
• telephone number;
• email address;
• number of guests;
• booking date and time;
• booking notes and preferences; and
• information you choose to provide about dietary requirements, allergies, accessibility needs or the occasion.

Online reservations made through our website are handled through ResDiary, our reservation service provider.

Enquiries and communications

If you contact us by email, telephone, social media, through our website or by another means, we may keep:

• your name;
• contact details;
• the contents of your enquiry;
• our correspondence with you; and
• any other information you choose to provide.

We use this information to respond to your enquiry and keep appropriate records of our communications.

Payments

Payments made at Elif Turkish Grill and Bar are processed through our payment providers.

We do not normally store full payment card numbers or security codes ourselves. Payment information may be processed and retained by the relevant payment provider in accordance with its own privacy policy and legal obligations.

Where payment or card details are required to secure a reservation, these may be handled by the relevant booking or payment provider rather than being stored directly by us.

Website information

When you visit our website, certain technical information may be processed automatically, such as:

• IP address;
• browser type;
• device information;
• pages visited;
• date and time of access; and
• basic technical information required to operate and secure the website.

We use this information only where necessary to operate, maintain and secure our website and services.

3. How we use your information

We may use personal information to:

• take and manage restaurant reservations;
• contact you regarding your reservation;
• respond to enquiries;
• accommodate dietary requirements, allergies and accessibility needs;
• process or facilitate payments;
• provide our restaurant services;
• manage cancellations and reservation-related matters;
• maintain appropriate business and financial records;
• operate and secure our website;
• prevent fraud, misuse or other unlawful activity;
• establish, exercise or defend legal claims; and
• comply with our legal and regulatory obligations.

We will only use your personal information where we have a lawful basis for doing so.

4. Our lawful bases for processing

Depending on the circumstances, we may rely on one or more of the following lawful bases under UK data protection law.

Contract

We may process your information where this is necessary to arrange or manage a reservation or otherwise provide a service you have requested.

Legitimate interests

We may process information where this is reasonably necessary for our legitimate business interests, such as:

• operating and managing the restaurant;
• managing reservations;
• maintaining business records;
• improving the security of our systems;
• preventing fraud or misuse; and
• establishing or defending legal claims.

Where we rely on legitimate interests, we consider the impact on your privacy and will not use this basis where your interests, rights or freedoms override our legitimate interests.

Legal obligation

We may process personal information where this is necessary for us to comply with a legal or regulatory obligation.

Consent

Where consent is required, we will ask for it before carrying out the relevant processing. You can withdraw your consent at any time.

5. Allergies and dietary information

You may choose to provide information about food allergies, intolerances, dietary requirements or other information relating to your health so that we can provide our services safely and appropriately.

We will only use such information where necessary for the relevant purpose and will take appropriate care when handling it.

Please note that although we take reasonable steps to accommodate information provided to us, customers remain responsible for informing restaurant staff of any allergies or dietary requirements when ordering.

6. Marketing

We may occasionally contact you with information about Elif Turkish Grill and Bar, including offers, events, promotions or other news, where permitted by law.

Where your consent is required, we will only send marketing communications after you have given the appropriate consent.

Every marketing email will include an option to unsubscribe.

You can also ask us to stop sending marketing communications at any time by contacting: info@elifcastlest.co.uk

Withdrawing consent or opting out of marketing will not affect any processing carried out before your withdrawal.

7. Who we share your information with

We only share personal information where reasonably necessary for operating our business, providing our services, complying with legal obligations or protecting our legitimate interests.

Depending on how you interact with us, this may include sharing information with:

• our reservation provider, ResDiary;
• payment service providers;
• website hosting and technical service providers;
• email and communications providers;
• IT and software service providers;
• professional advisers where necessary;
• insurers or other relevant organisations where necessary; and
• law enforcement, regulators, courts or other authorities where we are legally required to do so.

Where third-party service providers process personal information on our behalf, we take reasonable steps to ensure that appropriate contractual and security arrangements are in place.

We do not sell your personal information.

8. Third-party services

Some functions on our website are provided by third-party services.

ResDiary

Our online reservation functionality is provided through ResDiary. Information entered into the reservation system may be processed by ResDiary in accordance with its own privacy policy.

Google Maps

Our website may include a Google Maps feature on the Find Us page.

The map is designed not to load automatically. Instead, it is held behind a “Show the map” button. The map will only load when you choose to activate it.

When the map is loaded, Google may receive technical information such as your IP address and information about your device or interaction with the map. Google's own privacy and cookie policies apply to its processing.

9. CCTV

CCTV may be used at or around our premises for purposes such as:

• protecting customers, staff and visitors;
• preventing and detecting crime;
• protecting property;
• investigating incidents; and
• maintaining the security of our premises.

Where CCTV is operated, appropriate signage will be displayed.

CCTV footage will only be retained for as long as reasonably necessary for its intended purposes, subject to any longer period that may be necessary where an incident, investigation or legal matter requires the footage to be preserved.

10. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, taking account of our legal, regulatory, accounting and business requirements.

Different types of information may therefore be retained for different periods.

For example:

• Reservation information may be retained for a reasonable period after the reservation to manage the booking and related matters.
• Correspondence and enquiries may be retained for as long as necessary to deal with the enquiry and for a reasonable period afterwards.
• Accounting and financial records may be retained for the period required by applicable tax and accounting legislation.
• Marketing records may be retained while you remain subscribed or until you withdraw your consent, together with appropriate records of your preference.
• CCTV footage is normally retained for a limited period and may be retained for longer where necessary to investigate an incident or deal with a legal matter.

When information is no longer required, we will take reasonable steps to securely delete or anonymise it.

11. International transfers

Some of the third-party providers we use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

12. How we protect your information

We take reasonable technical and organisational measures to protect personal information against:

• unauthorised access;
• accidental loss;
• destruction;
• alteration;
• disclosure; and
• other unlawful or unauthorised processing.

Access to personal information is limited to people and service providers who need it for legitimate business purposes.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

13. Your data protection rights

Depending on the circumstances and subject to applicable legal exemptions, you may have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request erasure of your personal information;
• request restriction of processing;
• object to certain types of processing, including processing based on legitimate interests;
• request data portability where the right applies; and
• withdraw consent where we rely on your consent as the lawful basis for processing.

You may exercise your rights by contacting: info@elifcastlest.co.uk

We may need to verify your identity before responding to certain requests.

We will normally respond to a valid request within the time period required by applicable data protection law.

14. Complaints

If you have concerns about the way we have handled your personal information, we would encourage you to contact us first so that we can try to resolve the matter.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

You can contact the ICO through its website or by telephone:

• Website: ico.org.uk
• Telephone: 0303 123 1113

15. Cookies and similar technologies

Cookies are small files placed on your device when you visit a website. Similar technologies, including local storage, can perform comparable functions.

We aim to keep the use of cookies and similar technologies on our website to a minimum.

Strictly necessary and functional technologies

Our own website pages do not currently use analytics or advertising cookies.

We use browser local storage for a limited purpose: to remember when you have dismissed the House Rules notice so that it does not continue to appear.

This preference remains on your device and is not sent to us.

Analytics

We do not currently use Google Analytics or equivalent analytics services on this website.

We therefore do not use analytics cookies to create visitor statistics.

Marketing and advertising

We do not currently use our own marketing or advertising cookies on this website.

We do not use cookies to track you across other websites or create an advertising profile.

16. Third-party cookies and technologies

Third-party services embedded in or linked to our website may use their own cookies or similar technologies.

These currently include:

ResDiary

ResDiary provides our online booking functionality and may use cookies or similar technologies when its booking service is loaded.

Please refer to ResDiary's privacy and cookie information for further details.

Google Maps

Google Maps may use cookies or similar technologies when the map is loaded.

Our map is not automatically loaded when you first visit the page. It is held behind a “Show the map” button and is loaded when you choose to activate it.

Please refer to Google's relevant privacy and cookie information for further details.

17. Your cookie choices

You can control or delete cookies through your browser settings.

You can also clear the local storage associated with our website by clearing the site's stored data through your browser.

Please be aware that blocking or deleting certain cookies or browser storage may affect the functionality of some parts of the website, including reservation or map functionality.

If we introduce analytics, advertising or other non-essential technologies in the future that require consent, we will review our cookie arrangements and update this policy and the website's consent mechanisms as appropriate.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, the way we process personal information, third-party services we use, or applicable legal requirements.

Any updated version will be published on this page.

We recommend checking this page periodically for the latest version.

This Privacy Policy was last updated in September 2026.