Privacy Policy

This privacy policy explains how Saigon Kitchen, operated by SAIGON HOSPITALITY S.L, collects, uses, and protects your personal data when you use our website and services.

Data Controller

The data controller responsible for your personal data is SAIGON HOSPITALITY S.L, with registered address at CALLE MANUELA MALASAÑA 12, 28004, Centro, Madrid, NIF/CIF: B93829869. You may contact us at info@saigonkitchen.es.

Data We Collect

We collect the following categories of personal data when you use our services:

• Account information: email address, name, and password (hashed).
• Technical data: IP address, browser type, device information, and cookies (see our Cookies Policy).
• Contact form: name, email address, subject and message.
• Reviews: rating, text and, if you add one, a photo. Only your first name is published next to an approved review.
• Table reservations: made through our booking provider QuicRes, which collects the details you give when booking (for example name, phone, email, date, time and party size) and shares them with us so we can manage your reservation.

Purposes and Legal Bases

We process your personal data for the following purposes and under the corresponding legal bases under the GDPR and the Spanish LOPDGDD:

• To create and manage your account and provide the services you request (performance of a contract).
• To manage your table reservations (performance of a contract, or steps taken at your request before entering into one).
• To reply to messages you send through the contact form and, on the same basis, to improve our services based on them (legitimate interest). You can object to this second use at any time.
• To review and, once approved, publish the reviews you submit (consent, which you can withdraw at any time).
• To comply with legal and tax obligations (legal obligation).
• To improve our services and analyze usage patterns with privacy-respecting analytics (legitimate interest).
• To send promotional communications, only with your explicit consent (consent).

Data Processors and Third Parties

We share your personal data with the following third-party processors who act on our behalf under appropriate data processing agreements:

• Supabase — Database and authentication
• SendGrid — Sending transactional emails
• QuicRes — Reservation management

Our website is hosted by Railway (application), Supabase (EU). These processors may be located outside the EEA; where applicable, appropriate safeguards (such as Standard Contractual Clauses) are in place.

Data Retention

We retain your personal data only as long as necessary for the purposes described above or as required by applicable law. Account data is retained while your account is active. You may request deletion of your account at any time.

Contact form messages are kept for up to 12 months and then deleted. We may keep anonymised summaries that do not identify you. Reservation data is kept for as long as needed to manage the reservation and meet applicable legal obligations. Reviews are kept while they are published or until you ask us to delete them at info@saigonkitchen.es.

Your Rights

Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:

• Right of access: obtain confirmation of whether your data is being processed and access a copy.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data when it is no longer necessary.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interest.
• Right to restrict processing: request limitation of processing under certain circumstances.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent.

How to Exercise Your Rights

To exercise any of these rights, please contact us at info@saigonkitchen.es. We will respond within one month as required by law. If you ask us to delete your data, we will do so without undue delay and in any case within one month, unless we are legally required to keep it. If you believe your rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

International Data Transfers

Some of our data processors may be located outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact

If you have questions about this privacy policy or our data practices, please contact us at info@saigonkitchen.es, or write to SAIGON HOSPITALITY S.L at CALLE MANUELA MALASAÑA 12, 28004, Centro, Madrid.