Privacy Policy
Lyla Restaurant & Rooms
Last updated: 13 October 2026
At Lyla Restaurant & Rooms (“Lyla”, “we”, “us” or “our”), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our restaurant, stay in our rooms, make a reservation, use our website or contact us.
We handle your personal information in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Personal Information We Collect
Depending on how you interact with us, we may collect the following information:
Personal and contact details
Name and, where relevant, the names of other guests in your booking.
Email address and telephone number.
Billing address and other contact details you provide.
Restaurant reservations
Reservation date, time and party size.
Dietary requirements, allergies and relevant requests you choose to share.
Special requests or information needed to accommodate your visit.
Room bookings and accommodation
Check-in and check-out dates.
Number of guests and room preferences.
Booking confirmations, stay history and requests relating to your accommodation.
Information required for guest registration or legal obligations, where applicable.
Payments and transactions
Payment status, transaction references, invoices and receipts.
Relevant billing information.
Card payments may be processed by third-party payment providers. We do not intentionally store full payment card details where these are handled securely by our payment provider.
Communications
Messages, enquiries, feedback, reviews and complaints you send to us.
Your marketing preferences and records of consent, where applicable.
How We Use Your Information
We use your personal information to:
Manage restaurant reservations and room bookings.
Provide food, drink, accommodation and related services.
Communicate booking confirmations, amendments and important updates.
Process payments, deposits, invoices and refunds.
Respond to enquiries, feedback and complaints.
Accommodate dietary requirements, allergies and other relevant requests.
Improve our services, guest experience and website.
Prevent fraud, protect our premises and maintain security.
Meet legal, accounting, tax and regulatory obligations.
Send marketing communications where we are legally permitted to do so.
Establish, exercise or defend legal claims where necessary.
We will only use your personal information for purposes that are lawful and appropriate to our relationship with you.
Our Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for using your personal information. Depending on the circumstances, we rely on the following:
Contract: To manage your reservation, provide your stay or dining experience, process payments and fulfil our obligations to you.
Legal obligation: To comply with applicable accounting, tax, regulatory, safety and other legal requirements.
Legitimate interests: To manage and improve our business, respond to enquiries, maintain security, prevent fraud and protect our legal rights. We balance these interests against your rights and privacy.
Consent: Where required, including for certain marketing communications, non-essential cookies and the processing of certain sensitive information.
You may withdraw consent at any time where we rely on consent. This will not affect the lawfulness of processing carried out before withdrawal.
Sharing Your Information
We do not sell your personal information.
We may share relevant information with trusted third parties where necessary to operate our business, including:
Reservation and accommodation booking platforms.
Payment processors and banking providers.
Website hosting, IT support and software providers.
Email, communication and marketing service providers.
Accountants, auditors, insurers and professional advisers.
Relevant authorities, regulators or law enforcement agencies where legally required or necessary to protect our rights.
These providers may process personal information on our behalf or, in some cases, act as independent controllers. Where required, we put appropriate contractual and organisational safeguards in place.
We only share information that is reasonably necessary for the relevant purpose.
Cookies and Website Tracking
Our website may use cookies and similar technologies to ensure it functions properly, remember preferences, understand website usage and, where applicable, support analytics or marketing.
Strictly necessary cookies may be used where required to provide the website or service you request. We will seek your consent before using non-essential cookies where required by law.
You can manage your cookie preferences through our cookie settings, where available, and through your browser settings. Disabling certain cookies may affect website functionality.
If our website uses third-party analytics, embedded content or advertising technologies, we will provide further information about those technologies and obtain consent where required.
Marketing Communications
We may send you updates about Lyla Restaurant & Rooms, special offers, events and new services where we have a lawful basis to do so.
We will comply with applicable electronic marketing and privacy rules, including obtaining consent where required. Where the law permits us to rely on an existing-customer exception, we will provide an appropriate opportunity to opt out.
You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us directly.
Even if you opt out of marketing, we may still contact you about existing reservations, payments, bookings or other essential service matters.
How We Protect Your Information
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure systems, staff awareness and the use of reputable third-party service providers.
However, no method of transmitting or storing information electronically is completely secure. We cannot guarantee absolute security, but we take appropriate steps to protect the information entrusted to us.
Your Data Protection Rights
Under applicable data protection law, you may have the right to:
Access: Request a copy of the personal information we hold about you.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Ask us to delete your information in certain circumstances.
Restriction: Ask us to restrict how we use your information in certain circumstances.
Objection: Object to processing based on our legitimate interests or to direct marketing.
Data portability: Request certain information in a commonly used, machine-readable format where the right applies.
Withdraw consent: Withdraw consent where processing is based on your consent.
These rights are subject to applicable legal conditions and exemptions. We may need to verify your identity before responding.
To exercise your rights, contact us using the details in the “Who We Are” section above.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at https://ico.org.uk/make-a-complaint/.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, technology or legal obligations.
The latest version will be published on our website with the updated date shown at the top. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy, how we handle your personal information or how to exercise your data protection rights, please contact:
Lyla Restaurant & Rooms
Email: reservations@lylaedinburgh.info
Telephone: 01312858808