Privacy Policy

This Privacy Policy is provided by Park Plaza Hotels (UK) Services Ltd ('PPHE Hotel Group'), a company registered in the United Kingdom with company number 06255890, having its registered office at County Hall - Riverside Building 2nd Floor, Belvedere Road, London, England, SE1 7GP, in conjunction with Park Plaza Hotels Europe B.V. (Radarweg 60, 1043 NT Amsterdam, The Netherlands) and its operating subsidiaries ('PPHE', 'we', 'us', or 'our').

Chino Latino London is an award-winning contemporary Pan-Asian restaurant and Latin cocktail bar operating within Park Plaza London Riverbank, 18 Albert Embankment, London SE1 7TJ.

Park Plaza Hotels Europe B.V., Park Plaza Hotels (UK) Services Ltd, or the relevant operating entity of PPHE Hotel Group is the data controller responsible for your personal data. The UK Information Commissioner's Office (ICO) is the Lead Supervisory Authority for data processing carried out by PPHE Hotel Group.

This Privacy Policy explains how we collect, use, share, and protect personal information obtained through our website (chinolatino.co.uk, chinolatino.london, pphe.com), our dining reservations, masterclasses, private events, customer service interactions, and in-venue hospitality services at Park Plaza London Riverbank.

Please note that this Policy should be read in conjunction with our Website Terms & Conditions and our Cookie Policy.

This Privacy Policy does not cover independent franchisees or third-party reservation portals who operate under their own respective data protection notices.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have any data protection queries:

• By Email: dataprotection@pphe.com or london@chinolatino.co.uk

• By Post: Data Protection Officer, Park Plaza Hotels (UK) Services Ltd, County Hall - Riverside Building 2nd Floor, Belvedere Road, London, England, SE1 7GP

• By Telephone: +44 (0)20 7034 4800 (ask to speak with the Legal & Data Privacy Team) or +44 (0)20 7769 2500 (Restaurant Reception)

We collect and process personal data for key operational, hospitality, legal, and communicative purposes:

Where processing requires your consent (e.g. marketing newsletters or non-essential analytical cookies), you provide explicit consent through opt-in checkboxes or our cookie preferences tool.

You may withdraw your consent at any time without affecting the lawfulness of processing undertaken prior to withdrawal.

Our digital platform utilizes cookies, session tokens, and analytics pixels to deliver a responsive, secure dining experience, remember table reservation inputs, and understand website traffic patterns.

Please review our dedicated Cookie Policy for detailed information on every cookie, category, provider, and instructions on how to manage them.

Our website may include links to third-party services, such as social media channels (Instagram, Facebook, LinkedIn), reservation portals, and partner hotel resources.

When you click on these links, you leave our environment. We do not control and are not responsible for the privacy practices of external third parties. We encourage you to read their independent privacy notices.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, tax, and reporting requirements.

Dining transaction records and booking histories are generally retained for up to seven (7) years following our last interaction, after which data is securely deleted or anonymized.

Marketing subscriptions are retained until you unsubscribe or after an extended period of inactivity.

We have implemented robust technical and organizational security measures to protect your personal information from unauthorized access, accidental loss, improper use, disclosure, or alteration.

All personnel and third-party processors who access personal information are bound by strict obligations of confidentiality and data security.

Under the UK Data Protection Act 2018 and UK GDPR, you possess extensive statutory rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal information we hold about you.

• Right to Rectification: You may request that inaccurate or incomplete information be corrected.

• Right to Erasure ('Right to be Forgotten'): You can request deletion of your personal data where it is no longer needed.

• Right to Restrict Processing: You may ask us to restrict processing while an accuracy dispute is being investigated.

• Right to Data Portability: You may request transfer of your structured data to another provider in machine-readable format.

• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes at any time.

• Right to Withdraw Consent: You can withdraw previously granted consent at any time.

• Right to Lodge a Complaint: You have the right to file a complaint with the UK Information Commissioner's Office (ico.org.uk, helpline: 0303 123 1113).

We may update this Privacy Policy from time to time to reflect operational, regulatory, or technical changes. Any revisions will be published on this page with an updated revision date.

We encourage you to review this policy periodically to stay informed regarding how your personal information is protected.

Due to our international hotel operations and global technology partners (e.g. cloud hosting, analytics, and marketing platforms), your information may be processed in countries outside the UK and European Economic Area.

Where international transfers occur, we guarantee adequate safeguards in compliance with UK GDPR, including standard contractual clauses (SCCs), UK International Data Transfer Agreements (IDTAs), and equivalent data protection benchmarks.

We may share your data with:

• Internal Entities: Companies within the PPHE Hotel Group for consolidated customer service and reservation management.

• Third-Party Service Providers: IT support providers, reservation platform engines, payment processors, and survey systems operating under strict data processing agreements.

• Professional Advisors & Regulators: Legal counsel, auditors, insurers, tax authorities, and law enforcement agencies when mandated by law.

Children: We do not knowingly collect personal information from individuals under the age of 16 without parental or guardian consent.

Language: This Policy is drafted in English. Any translation is provided for convenience; in the event of ambiguity, the English language version shall govern.

Governing Law: This Privacy Policy is governed by the laws of England and Wales. The courts of England shall have exclusive jurisdiction over any disputes.