Privacy · UK GDPR

Privacy notice.

A short, honest summary of how we handle your personal information when you make a reservation request on arsemia.co.uk.

Who we are

Arsemia Cafe (“we”, “our”) operates a specialty coffee house at 26 Morningside Road, Edinburgh, EH10 4DA. For privacy enquiries contact info@arsemia.co.uk.

What we collect

When you submit the reservation form on this website, we collect only the information you enter: your name, email address, phone number (optional), the date, time and party size you are requesting, and any special requests you add.

Our server also records your IP address briefly in a short-lived rate-limit file, hashed, to prevent abuse of the booking form. This is deleted automatically within an hour.

Why we collect it

  • To contact you and confirm whether we can hold a table.
  • To note dietary requirements and any special requests you tell us about.
  • To protect the booking form from automated abuse.

Our lawful basis is Article 6(1)(b) of the UK GDPR — processing necessary to take steps at your request before entering into a contract.

How your details reach us

The form submits over an encrypted connection (HTTPS) to our server, which sends the details to our business inbox using authenticated SMTP via our email provider. We do not pass your details to any third party for marketing.

Where we store it, and for how long

Reservation emails are stored in the Arsemia Cafe mailbox at info@arsemia.co.uk, hosted by our email provider in the UK/EU. We delete reservation emails that are no longer needed, and in any case within twelve months of the booking date, unless a longer period is required by law.

Who can see it

Only Arsemia Cafe’s owner and authorised staff who need to manage bookings can read the mailbox. Our email provider processes the data on our behalf under their own security controls.

Your rights

Under the UK GDPR you have the right to request access to your personal data, correct it, or ask us to delete it. Email info@arsemia.co.uk and we will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies and tracking

This website does not set tracking cookies and does not use third-party analytics. The embedded map is served by OpenStreetMap for the contact page; it may set its own technical cookies for map tiles.

Changes

If we change this notice, we will update the page and the date below.

Last updated: 15 October 2026.