PRIVACY POLICY

How We Use Your Information

BOCCONCINO MAYFAIR

Last updated: 4 November 2026

This Privacy Policy explains how BOCCONCINO RESTAURANTS LTD, trading as Bocconcino Mayfair (“we”, “us” or “our”), collects and uses personal information when you visit our restaurant, use our website, make a reservation, contact us, subscribe to marketing or connect to our guest Wi-Fi.

Who We Are
BOCCONCINO RESTAURANTS LTD is the controller responsible for personal information processed in connection with Bocconcino Mayfair and its services.
Address: 19 Berkeley Street, London, W1J 8ED.
Email: accounts@bocconcinorestaurant.co.uk.

This policy applies to Bocconcino Mayfair. Bocconcino Soho is operated by a separate company and has its own privacy policy below. Other websites and services linked from our website may have their own privacy notices.

Information We Collect
We may collect your name, email address, telephone number, reservation details, event requirements, marketing preferences, correspondence and feedback.
Payments are handled by the relevant payment provider. We may receive transaction information and payment confirmations needed to manage your booking or purchase.
If you provide information about allergies, dietary requirements or accessibility needs, this may reveal health information or other sensitive personal information. We use it to respond to your request and provide appropriate service. Where explicit consent is required, we will ask for it.
When you use our website, we and our service providers may collect your IP address, browser and device information, approximate location, page URLs, referral sources, timestamps and online identifiers. Depending on your cookie choices, this may include page views, clicks, scrolling and other website interactions.
We may also receive information from reservation platforms such as OpenTable, payment providers, ordering services and platforms through which you contact us.

How We Use Your Information
We use your information to manage reservations, arrange events, provide restaurant services, process payments and respond to enquiries. We generally rely on the need to perform a contract with you or take steps at your request before entering into a contract.
We rely on legitimate interests where appropriate to maintain security, prevent misuse, investigate complaints and improve our operations. We consider the effect of this processing on your rights and reasonable expectations.
We process information where necessary to comply with legal obligations, including accounting, tax and regulatory requirements.
We rely on consent for optional website tracking, including Microsoft Clarity heatmaps and session recordings, and for marketing where consent is required. You can withdraw consent at any time without affecting the lawfulness of earlier processing.

Website Analytics and Microsoft Clarity
With your consent, we use Google Analytics and Microsoft Clarity to understand how visitors use our website and improve its content, navigation and booking journey.
Clarity collects information about clicks, taps, scrolling, page navigation and technical performance, together with device information and pseudonymous browser or session identifiers.
Heatmaps show patterns of visitor activity. Session replays reconstruct interactions with our web pages so that we can identify confusing layouts and technical problems. They do not record your camera, microphone or activity outside our website.
Microsoft states that text entered into input fields is masked by Clarity. This does not mean that all analytics information is anonymous.
Microsoft receives information through Clarity and acts as a separate data controller under its terms. Those terms describe additional processing, including the development and improvement of Microsoft services and AI and machine-learning technologies. Advertising-related processing is subject to the applicable consent settings and Microsoft’s privacy information.
See the Microsoft Privacy Statement:
https://privacy.microsoft.com/en-us/privacystatement
You can decline or withdraw analytics consent through Cookie Settings. Analytics consent is not required to browse our website or make a reservation.

Marketing and Advertising
Where permitted and with consent where required, we use your contact details to send restaurant news, event announcements and offers. You can unsubscribe using the link in a marketing email or by contacting us.
With your advertising-cookie consent, providers such as Google, Meta and LinkedIn may collect website interaction information to measure campaigns and help display relevant advertising. They may combine this with other information they hold, subject to their own privacy notices and your choices.
Where customer-list audience features are used, we require an appropriate lawful basis and any necessary consent. Hashed contact information used for audience matching remains personal data.
Accepting website cookies does not automatically subscribe you to email marketing.

Reservations, External Services and Guest Wi-Fi
Our website uses third-party services, including OpenTable reservation tools. These providers may collect information directly from you and process it under their own privacy notices. We receive information necessary to manage your reservation or request.
Our Clarity installation does not replay activity inside third-party OpenTable iframes.
If you use guest Wi-Fi, the network provider may process device identifiers, IP addresses, connection times, network usage and any required login details. This supports access, security and network performance. Additional information may be provided on the Wi-Fi sign-in page.
Wi-Fi marketing consent is separate from network access. We use Wi-Fi sign-up details for marketing only where you have opted in.

Sharing Information and International Transfers
Where necessary, we share information with reservation and payment providers, IT and hosting providers, Wi-Fi providers, marketing services, professional advisers and organisations supporting our operations.
Analytics and advertising providers receive information according to the services used and your consent choices. Information may also be disclosed where required by law or necessary for legal claims. We do not sell your personal information.
Some providers process information outside the United Kingdom. Where required, transfers must be covered by an applicable UK adequacy arrangement or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses.
Contact us for information about safeguards relevant to your data.

Retention and Security
We normally retain reservation and related correspondence records for up to 24 months, unless a longer period is necessary for legal requirements, a dispute or an ongoing matter.
Marketing information is retained until you unsubscribe or it is no longer needed. We may retain a minimal suppression record to respect your decision not to receive marketing.
Financial records are retained for the applicable statutory period. Wi-Fi and security records are retained only as needed for their operational, security and legal purposes.
Microsoft currently states that ordinary Clarity session recordings are retained for 30 days. Favourite recordings and a randomly selected sample may be retained for up to nine months. Other analytics information is retained according to the relevant service’s settings and retention arrangements.
We use appropriate technical and organisational measures to protect personal information and restrict access to those who need it.

Your Rights
Depending on the circumstances, you may request access, correction, deletion, restriction of processing or a portable copy of information you have provided.
You may object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you may withdraw it.
Contact accounts@bocconcinorestaurant.co.uk to exercise your rights. We may need to verify your identity.
You may also complain to the UK Information Commissioner’s Office:
https://ico.org.uk/

Children, Cookies and Updates
Our website and marketing are intended for adults making restaurant arrangements. Information an adult provides about a child attending a booking should be limited to what is necessary to arrange the visit.
Our Cookie Policy explains the technologies used on our website and how to manage your choices:

https://bocconcinorestaurant.co.uk/cookie
We may update this policy when our services or practices change. The date above shows when it was last updated.

BOCCONCINO SOHO

Last updated: 4 November 2026

This Privacy Policy explains how BISCOTTI LTD, trading as Bocconcino Soho (“we”, “us” or “our”), collects and uses personal information when you visit our restaurant, use our website, make a reservation, contact us, subscribe to marketing or connect to our guest Wi-Fi.

Who We Are
BISCOTTI LTD is the controller responsible for personal information processed in connection with Bocconcino Soho and its services.
Address: 58–59 Great Marlborough Street, London, W1F 7JY.
Email: GMSoho@bocconcinorestaurant.co.uk.

This policy applies to Bocconcino Soho. Bocconcino Mayfair is operated by a separate company and has its own privacy policy above. Other websites and services linked from our website may have their own privacy notices.

Information We Collect
We may collect your name, email address, telephone number, reservation details, event requirements, marketing preferences, correspondence and feedback.
Payments are handled by the relevant payment provider. We may receive transaction information and payment confirmations needed to manage your booking or purchase.
If you provide information about allergies, dietary requirements or accessibility needs, this may reveal health information or other sensitive personal information. We use it to respond to your request and provide appropriate service. Where explicit consent is required, we will ask for it.
When you use our website, we and our service providers may collect your IP address, browser and device information, approximate location, page URLs, referral sources, timestamps and online identifiers. Depending on your cookie choices, this may include page views, clicks, scrolling and other website interactions.
We may also receive information from reservation platforms such as OpenTable, payment providers, ordering services and platforms through which you contact us.

How We Use Your Information
We use your information to manage reservations, arrange events, provide restaurant services, process payments and respond to enquiries. We generally rely on the need to perform a contract with you or take steps at your request before entering into a contract.
We rely on legitimate interests where appropriate to maintain security, prevent misuse, investigate complaints and improve our operations. We consider the effect of this processing on your rights and reasonable expectations.
We process information where necessary to comply with legal obligations, including accounting, tax and regulatory requirements.
We rely on consent for optional website tracking, including Microsoft Clarity heatmaps and session recordings, and for marketing where consent is required. You can withdraw consent at any time without affecting the lawfulness of earlier processing.

Website Analytics and Microsoft Clarity
With your consent, we use Google Analytics and Microsoft Clarity to understand how visitors use our website and improve its content, navigation and booking journey.
Clarity collects information about clicks, taps, scrolling, page navigation and technical performance, together with device information and pseudonymous browser or session identifiers.
Heatmaps show patterns of visitor activity. Session replays reconstruct interactions with our web pages so that we can identify confusing layouts and technical problems. They do not record your camera, microphone or activity outside our website.
Microsoft states that text entered into input fields is masked by Clarity. This does not mean that all analytics information is anonymous.
Microsoft receives information through Clarity and acts as a separate data controller under its terms. Those terms describe additional processing, including the development and improvement of Microsoft services and AI and machine-learning technologies. Advertising-related processing is subject to the applicable consent settings and Microsoft’s privacy information.
See the Microsoft Privacy Statement:
https://privacy.microsoft.com/en-us/privacystatement
You can decline or withdraw analytics consent through Cookie Settings. Analytics consent is not required to browse our website or make a reservation.

Marketing and Advertising
Where permitted and with consent where required, we use your contact details to send restaurant news, event announcements and offers. You can unsubscribe using the link in a marketing email or by contacting us.
With your advertising-cookie consent, providers such as Google, Meta and LinkedIn may collect website interaction information to measure campaigns and help display relevant advertising. They may combine this with other information they hold, subject to their own privacy notices and your choices.
Where customer-list audience features are used, we require an appropriate lawful basis and any necessary consent. Hashed contact information used for audience matching remains personal data.
Accepting website cookies does not automatically subscribe you to email marketing.

Reservations, External Services and Guest Wi-Fi
Our website uses third-party services, including OpenTable reservation tools. These providers may collect information directly from you and process it under their own privacy notices. We receive information necessary to manage your reservation or request.
Our Clarity installation does not replay activity inside third-party OpenTable iframes.
If you use guest Wi-Fi, the network provider may process device identifiers, IP addresses, connection times, network usage and any required login details. This supports access, security and network performance. Additional information may be provided on the Wi-Fi sign-in page.
Wi-Fi marketing consent is separate from network access. We use Wi-Fi sign-up details for marketing only where you have opted in.

Sharing Information and International Transfers
Where necessary, we share information with reservation and payment providers, IT and hosting providers, Wi-Fi providers, marketing services, professional advisers and organisations supporting our operations.
Analytics and advertising providers receive information according to the services used and your consent choices. Information may also be disclosed where required by law or necessary for legal claims. We do not sell your personal information.
Some providers process information outside the United Kingdom. Where required, transfers must be covered by an applicable UK adequacy arrangement or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses.
Contact us for information about safeguards relevant to your data.

Retention and Security
We normally retain reservation and related correspondence records for up to 24 months, unless a longer period is necessary for legal requirements, a dispute or an ongoing matter.
Marketing information is retained until you unsubscribe or it is no longer needed. We may retain a minimal suppression record to respect your decision not to receive marketing.
Financial records are retained for the applicable statutory period. Wi-Fi and security records are retained only as needed for their operational, security and legal purposes.
Microsoft currently states that ordinary Clarity session recordings are retained for 30 days. Favourite recordings and a randomly selected sample may be retained for up to nine months. Other analytics information is retained according to the relevant service’s settings and retention arrangements.
We use appropriate technical and organisational measures to protect personal information and restrict access to those who need it.

Your Rights
Depending on the circumstances, you may request access, correction, deletion, restriction of processing or a portable copy of information you have provided.
You may object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you may withdraw it.
Contact GMSoho@bocconcinorestaurant.co.uk to exercise your rights. We may need to verify your identity.
You may also complain to the UK Information Commissioner’s Office:
https://ico.org.uk/

Children, Cookies and Updates
Our website and marketing are intended for adults making restaurant arrangements. Information an adult provides about a child attending a booking should be limited to what is necessary to arrange the visit.

Our Cookie Policy explains the technologies used on our website and how to manage your choices:
https://bocconcinorestaurant.co.uk/cookie
We may update this policy when our services or practices change. The date above shows when it was last updated.