Privacy policy
Information about how The Tiny Thai handles personal information shared through this website and its external services.
Last updated: 18 October 2026
This privacy policy explains how PK Trading (SW) Ltd, trading as The Tiny Thai, handles personal information connected with this website and the Wadebridge and Newquay restaurants.
1. Who we are
PK Trading (SW) Ltd is the data controller for personal information handled directly by The Tiny Thai. The company is registered in England and Wales under company number 13370681. Its registered office is C/O Whyfield, Building A, Green Court, Truro Business Park, Threemilestone, Truro, Cornwall, TR4 9LF.
For privacy questions or requests, email thetinythai@gmail.com, call the relevant restaurant, or use the details on our contact page.
2. Information we handle
This website does not currently provide a public contact form and does not collect card details. We may handle:
- your name, contact details and message when you email or telephone a restaurant;
- booking, order, voucher, dietary or accessibility information that you give to us or to a service used by a restaurant;
- recruitment information that you choose to send when applying for work;
- technical information needed to deliver and secure the website, such as IP address, browser and device information, requested pages, referral information, dates and times; and
- your cookie and tracking choices, stored in your browser.
Please do not send more information than is needed. If you tell us about an allergy or health-related requirement, we use that information only to discuss and provide the requested service.
3. How and why we use personal information
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries, group-booking requests and job applications | Our legitimate interests in running the restaurants and responding to you; or steps requested before entering a contract. |
| Managing reservations, takeaway orders and vouchers | Performance of a contract or steps requested before a contract. |
| Meeting accounting, tax, food-safety and other legal requirements | Compliance with a legal obligation. |
| Operating, protecting and improving the website | Our legitimate interests in providing a secure, useful website. |
| Optional analytics or advertising measurement | Your consent. Non-essential services are not loaded unless you allow the relevant category. |
Where we rely on legitimate interests, we consider the need for the processing and its effect on you. We do not use this website for solely automated decisions that have legal or similarly significant effects.
4. Booking, ordering and other external services
The website links to services operated by other organisations. Information entered on those services is collected under their own privacy information and may be shared with the relevant Tiny Thai restaurant so that it can fulfil your request.
- TOGO: Wadebridge table bookings and online gift vouchers.
- KuulSeats: Newquay table bookings. See the KuulSeats privacy policy.
- TouchTakeaway: Wadebridge click-and-collect orders.
- Square: Newquay click-and-collect orders.
- Google Maps, Instagram and Facebook: directions and social-media links.
These sites may collect information and set their own cookies after you follow a link. Their services are outside this website’s cookie controls, so please review the notice shown by the provider before submitting information.
5. Sharing information
We share personal information only where needed with the restaurant team, booking and ordering providers, website hosting and support providers, professional advisers, payment or accounting providers, and public authorities where the law requires it. We do not sell personal information.
6. International transfers
Some service providers may process information outside the UK. Where this happens, we require an appropriate UK data-transfer safeguard or rely on another lawful transfer mechanism. A provider’s own privacy notice gives further detail about its locations and safeguards.
7. How long we keep information
We keep information only for as long as it is needed for the purpose described above. We consider whether an enquiry or application is still active, whether a booking or order record is needed for customer service, accounting or legal claims, and any legal retention period. Consent choices stored by this website expire after 12 months. Hosting and security logs are retained only for the period needed to operate and protect the service.
8. Your rights
Depending on the circumstances, you may have rights to be informed, access your information, correct it, erase it, restrict its use, receive it in a portable format, and object to processing. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.
You have the right to object to processing based on legitimate interests and to object at any time to direct marketing.
Contact us using the details above to exercise a right. We may need to confirm your identity. You may also complain to the Information Commissioner’s Office through ico.org.uk.
9. Cookies and similar technologies
Our consent manager records your choices in browser storage and prevents optional analytics or marketing services from loading until the relevant consent is given. See our cookie policy for the current categories, storage periods and controls.
10. Changes to this policy
We will update this page when our services or data practices change. The date at the top shows when the wording was last reviewed.