Privacy Policy
Last updated: 1 January 2026
Tarra & Sura ("we", "our", or "us") operates the website www.tarra-sura.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a reservation. Please read it carefully.
1. Information We Collect
We may collect the following categories of personal information:
- Contact data: name, email address, phone number (provided when making a reservation or contacting us).
- Reservation data: dining date, time, number of guests, dining preferences, and special requests.
- Usage data: IP address, browser type and version, pages visited, time spent on pages, referrer URL, collected automatically via server logs and analytics.
- Cookie data: see Section 5 (Cookies) below.
We do not collect payment card data through this website. All payments are processed in-restaurant.
2. How We Use Your Information
We use your personal data for the following purposes:
- To confirm, manage, and fulfill your reservation.
- To communicate with you about your booking (confirmation, reminders, cancellations).
- To send the newsletter if you explicitly subscribed (you may unsubscribe at any time).
- To improve our website performance and user experience through aggregated analytics.
- To comply with applicable legal obligations.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using personal information depends on the data concerned:
- Contract performance: processing your reservation.
- Legitimate interests: improving our website and services, fraud prevention.
- Consent: newsletter subscriptions and non-essential cookies.
- Legal obligation: retaining certain records as required by law.
4. Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share information with:
- Service providers: email delivery services, web hosting providers, analytics platforms — acting as data processors under our instructions.
- Legal authorities: when required by law, court order, or governmental authority.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred.
5. Cookies
We use cookies and similar tracking technologies on our website. You can manage your cookie preferences through the banner displayed when you first visit the site, or by adjusting your browser settings.
- Essential cookies: necessary for the website to function (session management, security). Cannot be disabled.
- Analytics cookies: help us understand how visitors interact with the site (e.g., Google Analytics). Only set with your consent.
- Preference cookies: remember choices you make (language, consent state). Set with your consent.
Your cookie consent choice is stored in localStorage on your device under the key cookie_consent. You can withdraw consent at any time by clearing your browser's local storage.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Reservation data is typically retained for 3 years for operational and accounting purposes.
7. Your Rights
Depending on your location, you may have the following rights:
- GDPR (EEA/UK): Right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection (Art. 21). You also have the right to lodge a complaint with your local supervisory authority.
- CCPA (California): Right to know what personal information is collected, right to delete personal information (§ 1798.105), right to opt-out of sale (we do not sell data), right to non-discrimination for exercising your rights (§ 1798.125).
To exercise any of these rights, please contact us at: privacy@tarra-sura.com. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or alteration. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
9. Third-Party Links
Our website may contain links to third-party websites (e.g., Google Maps, social media). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
10. Children's Privacy
Our website is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including Thailand and countries where our service providers operate. We take steps to ensure adequate data protection safeguards are in place.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: privacy@tarra-sura.com
- Phone: +66 2 123 4567
- Post: Tarra & Sura, 123 Sukhumvit Road, Klongtoey, Bangkok, Thailand 10110