Privacy Policy
Last updated: 18 June 2026
1. Who We Are
ABY's Biryani Leeds operates from 263 Roundhay Road, Harehills, Leeds, LS8 4HS, United Kingdom (“we”, “our”, “us”). We are the data controller for personal data collected through this website (abysbiryani.com) and our in-store offers sign-up system.
Contact: info@abysbiryani.com | +44 7469 437700
2. What Data We Collect
We collect and process the following categories of personal data:
- Name — provided when you sign up for our Offers Club.
- Mobile phone number — provided when you sign up for our Offers Club, used to send you promotional WhatsApp messages.
- Email address — provided voluntarily via our contact or franchise enquiry forms.
- Franchise enquiry details — information you choose to share when submitting a franchise enquiry.
- Usage data — anonymised analytics collected via cookies (see Section 7).
3. How We Use Your Data
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Send promotional offers via WhatsApp | Consent (Art. 6(1)(a)) — you opt in via the Offers Club form |
| Respond to contact or franchise enquiries | Legitimate interests (Art. 6(1)(f)) — responding to direct enquiries |
| Improve our website | Legitimate interests — anonymised analytics only |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Marketing Messages (PECR)
Under the Privacy and Electronic Communications Regulations 2003 (PECR), we only send marketing messages to your mobile number if you have given us explicit consent by completing the Offers Club sign-up form. Each message we send includes an opt-out instruction. You can withdraw consent at any time by replying STOP to any message, or by contacting us at info@abysbiryani.com.
5. Data Sharing
We do not sell, rent, or trade your personal data. We may share it with:
- WhatsApp / Meta Platforms — messages are sent via WhatsApp. Meta's own privacy policy governs message delivery.
- Hosting and infrastructure providers — our VPS host processes data on servers within the UK/EEA.
- Law enforcement or regulators — only when legally required.
6. Retention
Offers Club sign-up data is retained until you withdraw consent, or for a maximum of 2 years from your last interaction, whichever is sooner. Franchise enquiry data is retained for 12 months. You can request deletion at any time (see Section 8).
7. Cookies
This website uses cookies to function correctly and to understand how visitors use the site. We use:
- Strictly necessary cookies — required for the website to operate (no consent needed).
- Analytics cookies — anonymised usage data to improve the site. Only set after you accept via the cookie banner.
You can manage or withdraw cookie consent at any time by clearing your browser cookies and revisiting the site.
8. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data (“right to be forgotten”).
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
- Data portability — receive your data in a structured, machine-readable format.
To exercise any of these rights, email info@abysbiryani.com. We will respond within 30 days. If you are unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. Security
We use industry-standard measures to protect your data, including HTTPS encryption in transit and access-controlled server infrastructure. No transmission over the internet is 100% secure; we will notify you of any breach affecting your rights as required by law.
10. Changes to This Policy
We may update this policy periodically. The “Last updated” date at the top reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.