The small print
Privacy Notice
Last updated 21 October 2026
Who we are
Sasha's Kitchen runs Sasha's Yah Suh Nice Afro Caribbean Kitchen in Dagenham and Ilford. We are the controller of the personal information described here: we decide why and how it is used.
If you have a question about your information or want to use any of your rights, email info@sashasckldn.co.uk or write to us at either branch.
What we collect, and why
- Booking a table: your name, email address, phone number, the branch, date, time and number of guests, and anything you tell us (occasion, requests). We use it to manage your booking, contact you about it, send a reminder 48 hours before, and keep a record of what was agreed (including the booking policies you accepted).
- Allergies, dietary needs and accessibility: only what you choose to tell us, used only so we can look after you on the day. This can be health information, so please share only what we need.
- Deposits: groups of three or more pay a deposit through our payment provider. We never see or store your card details; we keep the amount, whether it was paid or refunded, and the provider's reference.
- Contact form: your name, email address, phone number if you give it, the topic and your message (and an event date and guest numbers if you add them), so we can reply.
- Marketing emails: only if you tick the box yourself. We keep a record of the exact wording you agreed to, when, where (for example the booking form) and the IP address used, so we can show you opted in. You can unsubscribe at any time from any email, or by asking us.
- Birthday: if you tell us (staff can note it, or you can add it to your rewards account), we keep the day and month, and the year of birth only if you choose to give it. Giving it never signs you up for marketing. If you are on our email list, we also send it to our email provider (ActiveCampaign) so we can email you a birthday message; you can remove it any time.
- Copies of our emails to you: when we email you about a booking, a copy is kept in our team's mailboxes, so we have a record of what you were told. Each copy is labelled as a copy, and if one of our emails to you fails to send, the team is told so they can contact you another way.
- Where a booking came from: if you arrive from a link with campaign tags (for example from Instagram), the tags and the name of the referring website are saved with your booking so we know which promotions work. Advertising click identifiers are only kept if you allow marketing cookies.
- The hidden game: a five-letter name and score you choose to save. They are kept on your device, along with your sound and screen-effect choices; if you save to the shared high-score board, only the five letters, score and game details are stored, with nothing that identifies you.
- Security: our servers briefly process your IP address to keep the site working and to stop abuse (for example limiting repeated form submissions). We do not use it to identify you.
Sasha's Rewards
If you join our rewards scheme, we keep a rewards account for you. Joining is your choice and is separate from marketing emails: it never signs you up to them.
- Signing in: your email address, and a one-time 6-digit code we email you each time you sign in. Codes expire after 10 minutes and are stored only in scrambled form. While you are signed in, a cookie keeps you signed in on your device (see below).
- Your account: your name and email address, and, only if you add them, your phone number and your birthday (the year is optional). You can change or remove your name, phone number and birthday yourself on the My Rewards page. To change your email address, ask us.
- Your points and offers: when you pay and show your code, our team records the amount of your bill, the branch and the date, and adds points. We also keep the rewards you use and any correction we make to your points (with the reason). Your visits, points, heat level and badges are worked out from these records. Table bookings and deposits do not earn points.
- Your QR code: a short-lived code that identifies your account so our team can find it at the till. It changes every few minutes.
- Google Wallet: only if you choose “Add to Google Wallet”. Google then receives your name, rewards reference, points balance, heat level and a code that identifies your account, and we send it updates when your points change. Google's own privacy policy applies to what it does with your pass.
- Apple Wallet: only if you choose “Add to Apple Wallet”. Your pass holds your name, rewards reference, points balance, heat level and a code that identifies your account, and it lives on your device. So that it can update when your points change, we keep an identifier for your device and a notification address that Apple gives us, and we use Apple's notification service to tell your phone to refresh. Apple's own privacy policy applies to Wallet.
- Reminders near our branches: your wallet pass may show a reminder on your lock screen when you are close to one of our branches. Your phone works this out on the device from the branch addresses stored in the pass; we and the wallet provider's servers are not told where you are. You can turn it off for the pass in your wallet's settings.
Why we use it: to run the scheme you joined (contract), to prevent misuse, correct mistakes and keep records of points awarded and rewards used (our legitimate interests). We do not use your rewards information to make decisions about you by automated means; your heat level and badges are only a fun way of showing your activity.
We keep a rewards account while you use it, and for up to 2 years after your last visit or sign-in, then delete or anonymise it. Records of the bills we entered are kept for 6 years as accounting records. You can ask us to close your rewards account at any time.
Our lawful reasons
- To take and manage your booking, including any deposit: because it is necessary for the arrangement you asked for (contract).
- Allergy, dietary and accessibility details: your explicit consent, given when you choose to tell us. You can ask us to remove them at any time.
- Running your rewards account (points, rewards, sign-in): because it is necessary for the scheme you joined (contract). Preventing misuse and correcting mistakes: our legitimate interests.
- Replying to messages, keeping the site secure, understanding which promotions bring bookings, and handling disputes: our legitimate interests in running the restaurant, balanced against your rights.
- Marketing emails, and analytics or marketing cookies: your consent, which you can withdraw at any time.
- Keeping payment and refund records: our legal obligations (for example tax and accounting).
How long we keep it
- Bookings and their notes: up to 2 years after the date of your booking, then deleted or anonymised. Allergy, dietary and accessibility notes are removed sooner if you ask.
- Deposit, payment and refund records: 6 years, for tax and accounting.
- Contact-form messages: 12 months after you send them.
- Copies of our booking emails in the team mailboxes: up to 2 years after the booking, in line with bookings.
- Marketing: while you are subscribed. After you unsubscribe we keep a record of your opt-in and opt-out for 2 years, so we never email you by mistake.
- Analytics and advertising data: as set by each provider (for example, Google Analytics keeps it for 14 months).
- Rewards accounts: while you use them and for up to 2 years after your last visit or sign-in; Apple Wallet device identifiers are removed when you delete the pass from your phone. Sign-in codes: 10 minutes. Signed-in sessions: 30 days.
- Security records: a few days.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct it if it is wrong or incomplete;
- ask us to delete it, or to limit how we use it;
- object to how we use it, including stopping marketing at any time;
- ask for information you gave us in a portable format;
- withdraw any consent you have given (this doesn't affect what we did before).
Email info@sashasckldn.co.uk to use any of these rights. We will reply within one month and may need to check who you are first. It is free.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ico.org.uk (opens in a new tab), 0303 123 1113).
Children, decisions and changes
- Our website is not aimed at children, and we do not knowingly collect information from anyone under 13.
- Some bookings are confirmed automatically: if a table has no deposit and there is room within the branch's limits at that time, our system confirms it straight away. This is a routine availability check with no legal or similarly significant effect on you, and a member of our team can still change or cancel it. If you would like a person to look at your booking, contact us. Any booking that needs a deposit, or doesn't fit, is reviewed by a member of our team, and we make no other decisions about you by automated means alone. (Your rewards heat level and badges just show your activity.)
- If we change this notice, we will update the date at the top. Important changes will also be shown on the website.
Our branches: Dagenham, 62 Whalebone Ln S, Dagenham, RM8 1BB; Ilford, 284 Ley St, Ilford, IG1 4BS.