Privacy Policy

Last updated: 23 July 2026

How Mezra collects, uses and protects your personal data under the UK GDPR and the Data Protection Act 2018.

1. Who we are

Mezra ("we", "us", "our") operates this website and our restaurant, bar and lounge at The Mezra, Brentwood, Essex, CM13 3AE, United Kingdom. For any privacy question, call 01277 588999 or email info@themezra.co.uk.

We are the data controller for the personal data described in this policy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

We only collect personal data that is necessary to provide our services and to comply with our legal obligations. Depending on how you interact with us this can include:

• Identity and contact details: name, phone number, email address (when you make a reservation or send us an enquiry).
• Reservation details: party size, date, time, occasion, dietary or accessibility requirements you choose to share.
• Payment confirmation data: where a booking requires a deposit or card guarantee, we receive confirmation of the payment from our payment provider. We never see or store your full card number.
• Technical data: IP address, browser type, device information and pages visited.
• Marketing preferences: whether you have opted in to receive updates from us.

3. How we use your data

We use your personal data only for the purposes set out below, and only where we have a lawful basis under UK GDPR.

• To take and confirm bookings (lawful basis: performance of a contract).
• To take deposits and payments for bookings and events (lawful basis: performance of a contract).
• To respond to enquiries you send us through the Site (lawful basis: legitimate interests).
• To improve and secure our website (lawful basis: legitimate interests).
• To send you marketing communications, where you have given consent (lawful basis: consent, which you can withdraw at any time).
• To comply with legal, accounting and food-safety obligations (lawful basis: legal obligation).

4. Reservations and payments

Reservations are processed by our booking partner SevenRooms. When you book, the data you submit is processed by SevenRooms under its own privacy policy, and shared with us so that we can host you.

Card payments and pre-authorisations are processed by our payment provider, Fiserv. Your card details are entered on and processed by the provider's secure systems. We receive only confirmation of the payment, never your full card details.

5. Sharing your data

We never sell your personal data. We share it only with parties who help us run our business and only to the extent necessary, including:

• Reservation provider (SevenRooms), to process and confirm bookings.
• Payment provider (Fiserv), to process deposits and card payments securely.
• Email service provider, to deliver enquiry and confirmation emails.
• Hosting providers, to operate our website.
• Professional advisers, regulators and law-enforcement bodies, only where required by law.

6. How long we keep your data

We keep personal data only for as long as necessary for the purpose we collected it. Reservation and enquiry records are retained for up to 24 months. Accounting records, including payment records, are retained for 6 years as required by HMRC. Marketing-consent records are kept until you withdraw consent.

7. Your rights

Under UK GDPR you have the right to: access your data, ask us to correct or delete it, object to or restrict processing, withdraw any consent you have given, and request that we transfer your data to another controller.

To exercise any of these rights, email info@themezra.co.uk. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. International transfers

Some of our service providers process data outside the UK. Where they do, we rely on the UK International Data Transfer Agreement or equivalent safeguards approved by the ICO.

9. Cookies

For details of the cookies used on this Site, see our Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent change. Material changes will be flagged on our website.