Legal Notices
These legal notices govern access to and use of the website operated at phothuytay.co.uk (the “Website”). By using the Website, you agree to these terms. If you do not agree, you should not use the Website. Nothing in these notices affects your statutory rights.
Website Host
The Website is hosted and protected by Cloudflare.
- Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States
- Cloudflare UK Limited, County Hall, Belvedere Road, London SE1 7PB, United Kingdom
- Website: cloudflare.com
Intellectual Property
All content on the Website, including but not limited to text, menus, recipes, photographs, graphics, logos, icons, audio or video clips, designs, and the overall look and feel of the Website (the “Content”) is protected by copyright, database right, and other intellectual property laws. The Content is owned by the Website operator or used under licence from third parties.
You may view the Website and print one copy of pages strictly for your personal, non-commercial use. Any other use, including reproduction, modification, distribution, transmission, republication, display, or performance of the Content, in whole or in part, without prior written permission from the rights holder is prohibited.
All trade names, trademarks, and service marks displayed on the Website are the property of their respective owners. No licence or right is granted by implication, estoppel or otherwise to use any trademark displayed on the Website without the prior written permission of the relevant owner.
Use of the Website
- You must not use the Website in any way that is unlawful, fraudulent, harmful, or that violates the rights of any person.
- You must not attempt to gain unauthorised access to the Website, the server on which it is stored, or any server, computer or database connected to the Website.
- You must not introduce viruses, trojans, worms, logic bombs, or other malicious or technologically harmful material.
We reserve the right to suspend or terminate access to the Website, without notice, if we reasonably believe you have breached these terms.
Third-Party Services and Links
The Website may contain links to third-party websites or integrate third-party services (for example, content delivery, security, analytics, or reservation tools). We do not control and are not responsible for the content, security, or practices of third-party websites or services. Your use of third-party sites or services is at your own risk and subject to their terms and privacy policies.
Liability and Warranties
The Website and Content are provided “as is” and “as available”. While reasonable efforts are made to ensure that information on the Website is accurate and up to date, we do not guarantee that the Website or Content will be error-free, complete, reliable, available at all times, or free from viruses or other harmful components.
To the fullest extent permitted by law, we exclude all implied warranties and conditions and shall not be liable for any indirect or consequential loss or damage, or for any loss of profit, revenue, business, goodwill, or data arising out of or in connection with your use of (or inability to use) the Website.
Nothing in these notices excludes or limits liability for death or personal injury resulting from negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited under applicable law.
Personal Data and Privacy
Data Controller
The data controller is the operator of the Phothuytay Website. For all privacy-related queries, please use the contact details provided on the Website.
What Personal Data We Collect
- Browsing data: technical information such as IP address, device and browser type, operating system, pages viewed, time and date of visit, and referral source. Some of this data is collected automatically by security and performance services (including Cloudflare) to keep the Website secure and functioning.
- Contact and booking information: if you choose to contact us or make an enquiry or booking, we may collect your name, contact details (such as email address or phone number), booking details, and the content of your message.
- Preference data: your cookie and consent preferences.
Purposes and Legal Bases
- Providing and securing the Website (including fraud prevention, bot management, performance, and availability): legitimate interests and, where applicable, compliance with legal obligations.
- Handling enquiries, reservations, and customer support: performance of a contract or steps prior to entering into a contract; legitimate interests in responding to requests.
- Improving the Website and services, and compiling statistics: legitimate interests; analytics cookies or similar technologies are used only with your consent where required by law.
- Compliance with legal or regulatory obligations and exercising or defending legal claims: legal obligation and legitimate interests.
We do not sell your personal data.
Recipients and International Transfers
We may share personal data with trusted service providers who process data on our behalf for hosting, security, content delivery, analytics, communications, reservations, or maintenance. These providers include Cloudflare. We require such providers to process personal data only under our instructions and to implement appropriate security measures.
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses approved by the European Commission together with the UK International Data Transfer Addendum, or other lawful transfer mechanisms. You can request further information about these safeguards using the contact details provided on the Website.
Retention
Personal data is kept only for as long as necessary for the purposes described above and to meet legal, accounting, or reporting requirements. As a general guide:
- Security and access logs: up to 12 months unless a longer period is needed to investigate incidents.
- Enquiries and booking-related data: for the duration needed to handle your request and for up to 3 years thereafter.
- Cookie and consent records: for the duration of the relevant cookie’s life and up to 6 years for consent records where required by law.
Your Rights
Under UK data protection law, you have rights to request access to your personal data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw your consent at any time (this will not affect the lawfulness of processing before withdrawal).
To exercise your rights, please use the contact details provided on the Website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; website ico.org.uk.
Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and network security. No system is completely secure, and we cannot guarantee absolute security.
Children
The Website is not intended for children under 13. We do not knowingly collect personal data from children under 13 without verifiable consent from a parent or legal guardian.
Cookies and Similar Technologies
Cookies are small text files placed on your device to make the Website work, keep it secure, and improve your experience. We use the following categories of cookies:
- Strictly necessary cookies: required for the operation and security of the Website and cannot be switched off. Examples include Cloudflare cookies used for bot management and to maintain connection security (such as __cf_bm, cf_clearance, and __cfruid). These typically last from the session duration up to around 30 days and do not store personally identifying information.
- Performance and analytics cookies: help us understand how visitors use the Website so we can improve it. These are used only with your consent where required by law and may be first-party or set by third parties acting on our behalf.
- Functionality cookies: remember choices to provide enhanced features; used only where necessary and, where applicable, with your consent.
Managing cookies: You can manage cookies through your browser settings to block or delete cookies. If you block strictly necessary cookies, parts of the Website may not function properly. Where we use a cookie consent tool, you can adjust your preferences at any time via that tool.
Do Not Track: The Website does not currently respond to “Do Not Track” signals because there is no consistent industry standard for compliance.
Applicable Law and Jurisdiction
These legal notices, your use of the Website, and any non-contractual obligations arising out of or in connection with them are governed by the laws of England and Wales. The courts of England and Wales will have exclusive jurisdiction. If you are a consumer resident in Scotland or Northern Ireland, you may bring proceedings in your local courts.
Changes to These Legal Notices
We may update these legal notices from time to time to reflect changes in law or our practices. Changes take effect when published on the Website.
Last updated: 2 December 2025
Contact
For any questions regarding these legal notices, personal data, or cookies, please use the contact details provided on the Website.