PRIVACY & TERMS

 
 
 

The small-but-important print:
Our privacy policy and terms and conditions

 
 
 
 
 

Privacy Policy

Last updated: 24 February 2026

1. Who We Are

This Privacy Policy applies to The Athenian Ltd (Company number 09699675), a company registered in England and Wales with its registered office at:

14a The Courtyard

Sydenham Road

Croydon

CR0 2EE

United Kingdom

In this Privacy Policy, “we”, “us” or “our” refers to The Athenian Ltd.

We are the data controller responsible for your personal data.

2. The Personal Information We Collect

When you use our services, including visiting our restaurants, using our website, connecting to in-restaurant WiFi, or placing an order online, we may collect the following personal information:

  • Full name

  • Email address

  • Postal address and postcode

  • Contact telephone number

  • Date of birth (where provided)

  • Student status (where relevant to promotions)

  • Order history and purchase details

  • Information about items browsed or favourited

  • Device and technical information when using our website

  • Communications with our customer service team

We only collect personal data that is necessary for the services you use.

3. How We Collect Your Data

We collect personal data when you:

Place an order for collection or delivery

  • Make a table reservation

  • Register to use in-restaurant WiFi

  • Sign up for promotions, competitions or newsletters

  • Contact us by email, telephone, post or social media

  • Use our website

We may also collect technical data automatically through cookies and analytics tools (see Section 9).

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

Contract

To process and fulfil your orders, reservations, and related services.

Legal obligation

To comply with tax, accounting, food safety, and regulatory requirements.

Legitimate interests

To improve our services, prevent fraud, respond to complaints, and enhance customer experience.

Consent

Where you have opted in to receive marketing communications. You may withdraw your consent at any time.

5. How We Use Your Personal Data

We use your data to:

  • Process orders and payments

  • Manage reservations

  • Provide customer support

  • Send marketing communications (where consent has been given)

  • Improve website functionality and service experience

  • Meet legal and regulatory obligations

  • Prevent fraud and ensure security

6. Sharing Your Information

We may share your personal data with trusted third parties where necessary, including:

  • Payment processors (such as Elavon)

  • Delivery partners

  • IT and website hosting providers

  • Marketing and analytics providers

  • Professional advisers (legal, accounting, compliance)

All third parties are required to process your data securely and in accordance with data protection law.

7. International Transfers

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal protections.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, tax, and accounting obligations.

Order and transaction records are typically retained for up to 6 years in accordance with UK tax legislation.

Marketing data is retained until you withdraw your consent or unsubscribe.

9. Cookies and Analytics

Our website uses cookies and similar technologies to:

  • Ensure website functionality

  • Analyse site traffic and usage

  • Improve user experience

You can control cookies through your browser settings. For more information, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

Access to personal data is limited to employees and service providers who have a legitimate need to access it.

11. Your Data Protection Rights

Under UK data protection law, you have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure in certain circumstances

  • Restrict processing in certain circumstances

  • Object to processing

  • Request data portability

You are not required to pay any fee to exercise your rights. We will respond within one month.

To exercise your rights, please contact:

Email: info@theathenian.co.uk

Telephone: 02035567931

Address:

The Athenian Ltd

14a The Courtyard

Sydenham Road

Croydon

CR0 2EE

United Kingdom

12. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

We would, however, appreciate the opportunity to address your concerns first.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, and the “Last updated” date will be amended accordingly.