Saffron Room Roath Ltd, 118 Albany Road, Roath, Cardiff CF24 3RS, is the data controller, registered with the Information Commissioner\'s Office. Last reviewed October 2026.

What we collect

When you use the booking form we collect your name, mobile number, email address and postcode, what you would like to book, how many of you there are, a date if you give one, and what you write. The form also records the time it was sent and your IP address, used only to block automated submissions. The menu page keeps nothing: the heat and diet you filter by are in the address of the page and nowhere else, and the postcode you check on the takeaway page is not stored.

For a table or the back room we keep the booking in the diary with your name and number, and any allergy or diet you tell us, because the kitchen needs it on the night. For a takeaway we keep the order on the kitchen ticket and, for delivery, the address. We do not store card details; card payments go through our terminal provider. We ask for proof of age for alcohol and keep no record of it.

Why we use it

To run the booking, the order or the delivery (our contract with you).
To keep the allergy note for your booking so the kitchen cooks safely (a legal obligation).
To keep accounting records (a legal obligation).
To ask for a review after a booking or an order, which you can decline by replying.

We do not send marketing unless you have ticked the box for the Sunday thali email, which you can leave by replying. We do not sell or share your details with anyone for marketing, and we are not on the delivery apps, so no app holds your order history from us.

Who sees it

The people who work here, including the driver for a delivery address. Our card terminal provider, for payments. Our accountant, and our website host for the form. None of them may use your details for anything else.

How long we keep it

Table and thali bookings are deleted a month after the date. Back-room bookings are kept for a year, with the deposit record, because the accounts require it. Takeaway tickets are kept for six years as sales records, without the phone number after a month. Bookings that do not happen are deleted after three months. The thali email list is kept until you leave it.

Your rights

You can ask for a copy of what we hold, ask us to correct or delete it, or object to how we use it, by emailing hello@thesaffronroom.co.uk or asking at the counter. We answer within a month. If you are not satisfied you can complain to the Information Commissioner\'s Office at ico.org.uk.

Cookies

This website sets no cookies of its own. The booking form uses a session only to stop the same message being sent twice in thirty seconds, and the map on the Find us page is loaded from Google, which may set its own. There is no analytics script.