Privacy Policy

This Privacy Policy explains how Naija Grill & Spice Kitchen(“NaijaGrill”, “we”, “us”) collects and uses your personal information when you use our website, contact us, make a reservation, enquire about events or catering, or subscribe to our newsletter. We are the data controller for the personal data described here and are committed to handling it in line with the UK GDPR and the Data Protection Act 2018.

NaijaGrill is located at 77B Rookery Road, Handsworth, Birmingham, B21 9QU, United Kingdom. For any privacy question or request, contact us at quayumm2008@yahoo.co.uk.

Information we collect

We only collect the information you choose to give us through our forms, plus limited technical data:

• Reservations: your name, email address, phone number (optional), preferred date, party size, and any notes you add.
• Events & catering enquiries: your name, email, phone number (optional), event type, date, guest numbers, and message.
• Contact form: your name, email, phone number (optional), and message.
• Newsletter: your email address.
• Technical & usage data: if analytics are enabled, cookies and similar technologies collect anonymous or pseudonymous data such as pages viewed, device and browser type, and approximate location, to help us understand and improve the site.

We do not knowingly collect data from children, and we do not collect special category data or payment card details through this website (delivery payments are handled entirely by Uber Eats).

How and why we use your data

• To respond to your enquiries and manage reservation requests.
• To plan and quote for events and catering you ask about.
• To send our newsletter, where you have subscribed.
• To operate, secure, and improve our website.
• To comply with our legal obligations.

Legal bases (UK GDPR)

• Consent — for newsletter sign-ups and any non-essential analytics cookies. You can withdraw consent at any time.
• Legitimate interests — to respond to enquiries and to keep the website secure and working well.
• Steps prior to a contract — to process and confirm your reservation or event request.

Where your data is stored and who processes it

We use trusted third-party service providers acting as our data processors. Form submissions are stored in our secure database (Supabase). The website is hosted on Vercel, and content is managed with Sanity. Depending on the features enabled, we may also use:

• Google Analytics and Microsoft Clarity — website analytics.
• Google Maps — to show our location.
• An embedded video player (Google Drive) on some pages.
• Uber Eats — when you choose to order, you leave our site and Uber’s own privacy policy applies.

Some providers may process data outside the UK. Where they do, they rely on appropriate safeguards such as UK/EU adequacy or Standard Contractual Clauses.

How long we keep it

We keep enquiry and reservation records only for as long as needed to handle your request and for our legitimate business records, then delete or anonymise them. Newsletter data is kept until you unsubscribe.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to erase your data;
• restrict or object to our processing;
• data portability;
• withdraw consent at any time.

To exercise any of these, email quayumm2008@yahoo.co.uk. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

Essential cookies keep the site working. Any analytics or measurement cookies are only used where enabled and where you have consented. You can control cookies through your browser settings.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with its “last updated” date.