Last updated: 11 August 2026
Who we are
This policy covers the website for ZIMA, the Slavic restaurant at 45 Frith Street, Soho, London W1D 4SD (“ZIMA”, “we”, “us”).
For privacy questions contact [email protected] or +44 20 7494 9111.
What we collect
We only collect what we need to run the restaurant and this website.
- Contact and booking details you send us (name, email, phone, party size, occasion, message).
- Job applications via Work with us: name, email, phone (optional), message and CV as a PDF.
- Technical data such as browser type, device and approximate location from your IP - when analytics is enabled with your consent.
- Cookie preferences you set on this site.
How we use it
We use personal data to reply to enquiries, take bookings and private-hire or catering requests, consider job applications, send gift-voucher or newsletter confirmations you asked for, improve the website (with analytics consent), and meet legal or accounting duties.
Job applications and CVs
If you apply through Work with us, we process your contact details, message and CV only to consider you for roles at ZIMA. The PDF is held in memory for the request and forwarded to our hiring team via our internal messaging tools; it is not saved as a file on the website server. We keep applications only as long as needed for that recruitment process (and any related legal duties), then delete them. To withdraw an application or ask us to erase it, email [email protected].
Sharing
We do not sell your data. We may share it with trusted providers who help us operate - for example our reservation system (SevenRooms, when you book), email delivery, Google Analytics (only after you Accept analytics), Google Search Console (a one-time site-ownership check, not visitor tracking), hosting and CDN (including Cloudflare), and the messaging tools we use to run the restaurant and hiring - only as needed for that service. They must keep it secure and use it only for our instructions.
How long we keep data
Enquiry and booking messages are kept as long as needed to handle your request and for ordinary business records. Job applications and CVs are kept only for the relevant recruitment process, then deleted. Analytics data follows the retention set in that tool. You can ask us to delete or update your details where the law allows.
Your rights
Under UK GDPR you can ask for access, correction, deletion, restriction, objection to certain processing, and data portability where it applies. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Children
This site is aimed at adults booking or exploring the restaurant. We do not knowingly collect data from children for marketing.
Changes
We may update this policy when our practices or the law change. The “Last updated” date at the top will change when we do.
Questions about privacy - write to [email protected] or use our Contact.