

WEBSITE PRIVACY & COOKIES POLICY

Last updated: 2 August 2026
1. Introduction
SMOQUE respects your privacy and is committed to protecting your personal information.
This Privacy and Cookies Policy explains how we collect, use, store and share personal information when you:
-
Visit www.smoque.co.
-
Make, amend, or cancel a reservation.
-
Contact one of our restaurants.
-
Submit an enquiry or feedback form.
-
Join our mailing list.
-
Apply for a job.
-
Attend one of our restaurants or events.
-
Interact with us through social media or another online service.
This policy also explains your rights under the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.
2. Who We Are
The company responsible for your personal information depends on the SMOQUE restaurant with which you interact:
-
Bromley: OTTOMAN RESTAURANTS BR LTD
-
Warlingham: OTTOMAN WW LTD
-
Victoria: WAKA BURGERS LTD
Each company acts as the data controller for personal information relating primarily to its restaurant. Where information is processed centrally across the SMOQUE website or shared administration systems, the relevant companies may act as joint controllers or separate controllers, depending on the processing activity.
You may contact us at info@smoque.co if you are unsure which company is responsible for your information.
References in this policy to “SMOQUE”, “we”, “us” or “our” mean the company responsible for the restaurant or processing activity concerned.

3. Personal Information We Collect
Depending on how you interact with us, we may collect the following information.
3.1 Identity and contact information
This may include your:
-
Name.
-
Email address.
-
Telephone number.
-
Postal address, where needed.
-
Social-media username.
-
Preferred SMOQUE restaurant.
3.2 Reservation and event information
When you make a reservation or event enquiry, we may collect:
-
Reservation date and time.
-
Number of guests.
-
Restaurant location.
-
Seating or accessibility requirements.
-
Celebration or event details.
-
Dietary requirements and allergy information.
-
Reservation history.
-
Cancellation and amendment information.
-
Deposit or payment status.
-
Messages exchanged with you about your booking.
Information about allergies, disabilities or health requirements may constitute special-category personal data. We only use this information when necessary to accommodate your request, protect your safety or meet our legal obligations.
Please only provide information about other members of your party when you have their permission to do so.
3.3 Payment information
Where a reservation requires a deposit, pre-authorisation or cancellation payment, payment processing may be handled by our booking or payment provider.
We may receive limited transaction information, such as:
-
Payment status.
-
Amount paid.
-
Transaction reference.
-
Payment date.
-
Limited card details, such as the card type and last four digits.
We do not normally receive or store your complete payment-card number or security code.
3.4 Enquiries and feedback
If you contact us, complete a website form or provide feedback, we may collect:
-
Your name and contact information.
-
The restaurant concerned.
-
The content of your message.
-
Details of your experience.
-
Records of our response and subsequent correspondence.
Please avoid including unnecessary sensitive information in free-text forms.
3.5 Marketing information
If you join our mailing list or agree to receive marketing, we may collect:
-
Your name and email address.
-
Your marketing preferences.
-
Details of consent given or withdrawn.
-
Information about your interaction with our marketing communications, where permitted.
3.6 Recruitment information
If you apply for a role with SMOQUE, we may collect:
-
Your name and contact information.
-
CV and employment history.
-
Qualifications and experience.
-
Right-to-work information.
-
References.
-
Interview notes.
-
Any other information you provide as part of your application.
A more detailed recruitment privacy notice may be provided where appropriate.
3.7 Technical and website information
When you use our website, we or our authorised service providers may collect:
-
IP address.
-
Browser and device type.
-
Operating system.
-
Approximate location derived from your IP address.
-
Pages visited.
-
Date, time and duration of visits.
-
Links and buttons selected.
-
Referring website or search engine.
-
Cookie identifiers and consent preferences.
-
Diagnostic, security and performance information.
Optional analytics or marketing information should only be collected after the necessary consent has been obtained.
3.8 Restaurant security information
Where CCTV operates at a SMOQUE restaurant, we may collect images of customers, visitors and staff for security, public-safety and crime-prevention purposes.
Appropriate CCTV signs are displayed at each restaurant where CCTV is in operation.

4. How We Collect Personal Information
We may collect personal information:
-
Directly from you.
-
Through our website and forms.
-
Through our reservation provider.
-
When you telephone or email us.
-
When you visit one of our restaurants.
-
Through our payment providers.
-
Through our mailing-list provider.
-
Through social-media platforms.
-
Through website analytics and cookie technologies.
-
From another member of your party who makes a reservation on your behalf.
-
From publicly available sources where appropriate and lawful.
Links to other websites are provided for convenience. We are not responsible for the privacy practices of websites operated by other organisations.

5. How and Why We Use Your Information
We only use personal information when we have a lawful basis for doing so.

Purpose
Managing reservations, amendments and cancellations
Responding to enquiries and feedback
Processing deposits and payments
Accommodating allergies, disabilities or health requirements
Sending requested marketing communications
Managing job applications
Information used
Identity, contact, reservation and transaction information
Identity, contact and correspondence information
Identity, reservation and transaction information
Dietary, allergy, accessibility or health information
Identity, contact and marketing information
Identity, contact and recruitment information
Lawful basis
Performance of a contract or steps requested before entering a contract
Legitimate interests in responding to customers and improving our service
Performance of a contract and compliance with legal obligations
Explicit consent, vital interests or another applicable condition under data-protection law
Consent, or legitimate interests where permitted by law
Steps taken before entering an employment contract, legal obligations and legitimate interests

Purpose
Operating and securing our website
Measuring website use through optional analytics
Preventing fraud, misuse and crime
Managing complaints and legal claims
Keeping financial and business records
Improving our restaurants, menus and customer service
Information used
Technical, security and usage information
Cookie and usage information
Identity, transaction, technical and CCTV information
Identity, contact, reservation and correspondence information
Reservation, payment and transaction information
Feedback, reservation and usage information
Lawful basis
Legitimate interests and compliance with legal obligations
Consent
Legitimate interests and compliance with legal obligations
Legitimate interests and the establishment, exercise or defence of legal claims
Compliance with legal obligations
Legitimate interests in developing and improving our business

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights and freedoms override those interests.
We do not use your personal information for purposes that are incompatible with those described in this policy unless permitted or required by law.

6. Marketing Communications
We may send you news, offers and event information where:
-
You have consented to receive it; or
-
The law otherwise permits us to contact you and you have not opted out.
You can unsubscribe at any time by:
-
Selecting the unsubscribe link in a marketing email.
-
Contacting us at info@smoque.co.
-
Updating your communication preferences where that option is available.
Withdrawing from marketing will not prevent us from sending necessary service communications concerning an active reservation, payment, enquiry or transaction.
We do not sell your personal information to third parties for their own marketing.
7. Sharing Personal Information
We may share personal information with carefully selected organisations that help us operate our business, including:
● Wix, which provides our website platform, hosting and certain website services;
● OpenTable, which provides our online restaurant reservation services;
● our payment-processing providers, where deposits or other payments are required;
● our email and mailing-list service providers;
● Google, where Google Analytics or Google Maps is enabled;
● IT, website-maintenance and cybersecurity providers;
● professional advisers, including accountants, insurers and solicitors;
● government agencies, regulators, courts and law-enforcement bodies where required by law; and
● a purchaser, investor or successor if our business or assets are reorganised, sold or transferred.
Service providers may only process personal information for agreed purposes and must protect it appropriately.
Some links or embedded services—including maps, social-media content and reservation widgets—may be operated by third parties. Those organisations may collect information under their own privacy policies.
8. International Transfers
Some service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps designed to ensure that an appropriate level of protection is provided. These may include:
-
A UK adequacy regulation.
-
The UK International Data Transfer Agreement.
-
The UK Addendum to the EU Standard Contractual Clauses.
-
Other legally recognised safeguards.
You may contact us for more information about the safeguards used for relevant international transfers.

9. How Long We Keep Personal Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, safety and reporting requirements.
Our usual retention periods are:

Information
General enquiries and routine correspondence
Reservation records
Financial and transaction records
Marketing information
Records of marketing consent or withdrawal
Unsuccessful job applications
CCTV recordings
Cookie and consent records
Usual retention period
Up to 24 months after the enquiry is closed
Up to 24 months after the booking, unless required for a dispute or legal obligation
Usually six years after the relevant financial year
Until consent is withdrawn, the person opts out or the information is no longer required
Retained as evidence of compliance for an appropriate period
Usually up to six months after the recruitment process, unless a longer period is agreed
Normally 30 DAYS, unless required for an investigation or legal claim
According to the duration stated in the cookie settings and our consent-management system

These periods may be extended where information is required for a complaint, investigation, safeguarding matter or legal claim.

10. How We Protect Personal Information
We use appropriate organisational and technical measures designed to protect personal information against:
-
Unauthorised access.
-
Accidental loss.
-
Improper use.
-
Unlawful disclosure.
-
Alteration.
-
Destruction.
Access is restricted to authorised people who require the information for legitimate business purposes.
No internet transmission or electronic storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will assess it and notify affected individuals and the Information Commissioner’s Office where required by law.
11. Your Data-Protection Rights
Depending on the circumstances, you may have the right to:
-
Request access to your personal information.
-
Ask us to correct inaccurate or incomplete information.
-
Ask us to delete your personal information.
-
Ask us to restrict how your information is used.
-
Object to processing based on legitimate interests.
-
Object to direct marketing at any time.
-
Request the transfer of certain information to you or another organisation.
-
Withdraw consent where processing is based on consent.
-
Ask for information about safeguards used for international transfers.
-
Complain to the Information Commissioner’s Office.
These rights are not absolute, and legal exceptions may apply.
To exercise a right, contact info@smoque.co. Please use the subject line “Privacy Request”.
We may ask for reasonable proof of identity before responding. We normally respond within one month, although the law permits additional time for particularly complex requests.
You will not normally be charged for exercising your rights. A reasonable fee may be charged, or a request may be refused, where it is manifestly unfounded or excessive.
12. Complaints
We would appreciate the opportunity to address your concerns first. Please contact:
Email: info@smoque.co
Postal address: 2-4 Ringers Road • Bromley
Kent BR1 1HT
You also have the right to complain to the UK Information Commissioner’s Office.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

13. Children’s Information
Our website and restaurant services are not directed specifically at children.
Reservation information should normally be provided by an adult. If we learn that personal information about a child has been collected inappropriately, we will take reasonable steps to delete or otherwise deal with it in accordance with applicable law.
14. Automated Decision-Making
We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.
If this changes, we will update this policy and provide the information required by law.
Cookies Policy
15. What Are Cookies?
Cookies are small text files placed on your computer, smartphone or other device when you visit a website.
We may also use similar technologies, such as pixels, tags, scripts, local storage or software-development tools. In this policy, we refer to these technologies collectively as “cookies”.
Cookies may be:
-
Session cookies, which expire when you close your browser.
-
Persistent cookies, which remain for a specified period.
-
First-party cookies, which are set by SMOQUE or our website platform.
-
Third-party cookies, which are set by another organisation whose service appears on our website.
16. How We Use Cookies
We may use the following categories of cookies:
16.1 Strictly necessary cookies
These cookies are required for the website to operate correctly. They may provide:
-
Website security.
-
Network management.
-
Basic website functions.
-
Reservation or form functionality requested by the user.
-
Cookie-preference storage.
Strictly necessary cookies do not require consent, but we must still explain their purpose.
16.2 Functional cookies
These cookies allow the website to remember choices and provide enhanced functionality.
They may remember settings such as your selected location or other preferences. Functional cookies are only used where permitted and, where required, after consent.
16.3 Analytics cookies
Analytics cookies help us understand how visitors use the website, including:
-
Which pages are visited.
-
How visitors reach the website.
-
How long visitors spend on pages.
-
Which features are used.
-
Whether technical errors occur.
Where Google Analytics or another analytics service is used, associated cookies must remain disabled until you provide consent.
Analytics information may involve online identifiers or other information capable of distinguishing a browser or device. It should not be described as completely anonymous unless it has genuinely been anonymised.
16.4 Marketing cookies
Marketing cookies may be used to:
-
Measure advertising performance.
-
Build an understanding of visitor interests.
-
Display more relevant advertising.
-
Track activity across websites or services.
These cookies require consent and must remain disabled unless you actively accept them.
16.5 Third-party and embedded-content cookies
Embedded maps, videos, social-media features, reservation tools and other third-party content may set cookies or collect information.
Where these technologies are not strictly necessary, they should not be activated before valid consent is obtained.

17. Cookies and services used on this website
Our website uses cookies and similar technologies provided by Wix and, where applicable, third-party services such as OpenTable, Google Analytics, Google Maps and social-media platforms.
The precise cookies used may change when we update our website, applications or third-party integrations.
A current list of detected cookies and services—including their provider, purpose, category and duration—is available through the Cookie Settings panel displayed on our website.
You can reopen the Cookie Settings panel at any time to review or change your preferences.

18. Google Analytics
We use Google Analytics 4 to understand how visitors use our website and to improve its content and performance.
Google Analytics may collect information such as:
-
Pages visited.
-
Approximate location.
-
Browser and device information.
-
Referring source.
-
Interactions with website features.
-
Online identifiers associated with the browser or device.
Google Analytics is disabled until you consent to analytics cookies
.
Where enabled, we should configure the service to minimise the information collected, apply suitable retention settings and disable unnecessary advertising features.
Google processes information in accordance with its own privacy documentation. International data transfers may occur and must be covered by appropriate legal safeguards.
19. Managing Cookie Preferences
When you first visit our website, you are shown a cookie banner that allows you to:
-
Accept optional cookies.
-
Reject optional cookies.
-
Select individual cookie categories.
-
Continue using the website with strictly necessary cookies only.
Rejecting optional cookies should be as easy as accepting them.
You can change or withdraw your consent at any time by selecting the “Cookie Settings” link displayed on the website.
You can also manage cookies through your browser settings. Blocking some cookies may affect website features or services.
Withdrawing consent does not affect the lawfulness of processing that occurred before consent was withdrawn.
20. Changes to This Policy
We may update this policy when:
-
Our services or systems change.
-
We appoint new service providers.
-
Our use of personal information or cookies changes.
-
Legal or regulatory requirements change.
The latest version will be published on this page with an updated revision date.
Significant changes may also be communicated through the website or by another appropriate method.
21. Contact Us
Questions about this Privacy and Cookies Policy should be sent to:
SMOQUE Privacy Team
Email: info@smoque.co
Address: 2-4 Ringers Road • Bromley
Kent BR1 1HT
Telephone: 0208 466 7700

