Overview
Maintaining the security of your data is a priority at MyLahore, and we are committed to respecting your privacy rights. We pledge to always handle your data fairly and legally. MyLahore is also dedicated to being transparent about what data we collect about you and how we use it.
This notice applies whether you visit our stores, use our website, or access our mobile app. It provides you with information about:
- how we use your data.
- what personal data we collect.
- how we ensure your privacy is maintained.
- your legal rights relating to your personal data.
What personal data we collect
General
- your name, age/date of birth and gender.
- your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address.
- purchases and orders made by you.
- your on-line browsing activities on MyLahore websites.
- your password(s) for our website.
- when you make a purchase or place an order with us, your payment card details.
- your communication and marketing preferences.
- your interests, preferences, feedback and survey responses.
- your correspondence and communications with MyLahore; and
- other publicly available personal data, including any which you have shared via a public platform (such as a Twitter feed or public Facebook page).
Collection of Personal Data via the Mobile App and Rewards scheme
The MyLahore app and Rewards scheme collect personal data in the following ways:
- When you create an account, we collect your name, contact details, and login credentials, as well as information regarding your relationship with MyLahore (e.g. asking what is your nearest restaurant).
- When you place an order via the app or use rewards, we collect your purchase details, delivery address, and payment details.
- When you enable location services, we collect, use, and share your location data to enhance your experience (e.g., finding nearby MyLahore stores).
Wi-Fi
When you use MyLahore Guest Wi-Fi we may collect below data:
- First Name
- Last Name
- Email address
- Contact Number
- Date of Birth
- Device Identification
- MAC address
- The volume of data which you use.
- Your usage by access time, frequency and location.
Mailing Lists
As part of the registration process for our e-news emails, we collect personal information. We use that information: to tell you about relevant products, services, news and other information; to contact you if we need to obtain or provide additional information; to check our records are right and to check every now and then that you’re happy and satisfied. We don’t rent or trade email lists with other organisations and businesses.
We use third-party providers to deliver our e-news emails. We gather statistics around email opening and clicks using industry-standard technologies to help us monitor and improve our emails. You can unsubscribe to general mailings at any time by clicking the unsubscribe link at the bottom of any of our emails or by emailing our Data Protection Officer dpo@mylahore.co.uk.
Online Order Data
When you purchase merchandise, membership or gift voucher(s) through Landline, Mobile or online your name, address data, email and contact number will be stored in our Back-Office System.
Call Recording
Telephone order calls may be recorded for quality and training purposes to ensure that MyLahore maintains its standards of customer service excellence.
CCTV Recording
We use CCTV cameras at our premises for security, crime prevention, and safety purposes. These recordings may be monitored and stored for a reasonable period in compliance with data protection laws. CCTV footage is only accessed by authorized personnel and may be shared with law enforcement if required.
How We Use Your Data
General
MyLahore Group uses your personal data:
- to provide goods and services to you;
- to make a tailored website and mobile app available to you;
- to verify your identity;
- for crime and fraud prevention, detection, and related purposes;
- to contact you electronically about news/updates, promotional offers and products/services we think may interest you;
- anonymously for market research purposes to better understand your needs;
- to enable MyLahore to manage customer service interactions with you;
- where we have a legal right or duty to use or disclose your information (e.g., in relation to an investigation by a public authority or in a legal dispute).
Marketing Communications
You will receive marketing communication from us if you have (i) consented to do so, or (ii) requested information from us, made a booking, created an account, or purchased goods or services from us and you have not opted out of receiving the communications. We may also analyse your personal data to form a view which products and offers may be of interest to you so that we can then send you relevant marketing communications. You can opt out at any time by:
- Changing marketing preferences via your MyLahore account (where applicable).
- Clicking the “unsubscribe” link in marketing emails.
- Contacting MyLahore via the contact channels set out in this Notice.
Third Parties We Share Your Data With
To provide certain services, we may share your personal data with:
- IT, delivery, and marketing service providers;
- App store providers (e.g., Apple App Store, Google Play Store);
- Mobile networks where necessary;
- Paytronix (a third-party service provider in the U.S. and the UK)—where data is transferred outside the UK, we will ensure appropriate safeguards are in place.
We may also share your personal data with:
- Governmental bodies, regulators, law enforcement agencies, courts, and insurers where required:
- to comply with legal obligations.
- to exercise legal rights (e.g., court cases);
- to prevent, detect, or investigate crime;
- to protect our employees and customers.
Your Rights Over Your Personal Data
Under UK data protection law, you have the following rights:
- Right of Access – You can request access to your personal data.
- Right to Rectification – You can request correction of inaccurate or incomplete data.
- Right to Erasure – You can request deletion of your personal data.
- Right to Restrict Processing – You can request that we limit processing in certain circumstances.
- Right to Object – You can object to certain types of processing, such as direct marketing.
- Right to Data Portability – You can request your data in a structured format for reuse elsewhere.
To exercise these rights, contact our Data Protection Officer at dpo@mylahore.co.uk.
Cookies and Tracking Technologies
MyLahore websites and the mobile app use cookies to enhance user experience. We use cookies for:
- Essential functionality (e.g., enabling orders and secure logins);
- Analytics (e.g., Google Analytics) to monitor site usage anonymously;
- Personalisation (e.g., saving preferences);
- Marketing and advertising.
You can manage cookies via browser settings:
- Google Chrome: Settings > Privacy and Security > Cookies
- Safari: Preferences > Privacy > Manage Website Data
- Firefox: Preferences > Privacy & Security > Cookies and Site Data
- Edge: Settings > Site Permissions > Cookies
Below cookies we use on our website:
| Cookie Name |
Purpose |
Duration |
| _ga |
Used to distinguish users and track website performance. |
1 year |
| _tracking_consent |
Stores user consent preferences for tracking and analytics. |
Varies based on user settings |
Disabling cookies may impact website and app functionality.
How Long We Retain Your Data
We retain your data only for as long as necessary for legal and business purposes.
How We Protect Your Data
We implement strong security measures, including:
- Data encryption.
- Regular cybersecurity assessments of our service providers.
- Routine penetration testing of systems.
- Internal policies and staff training on data protection.
MyLahore will never ask for banking details via email. If you receive such a request, please ignore it.
Legal Basis for Processing Personal Data
We process personal data based on the following legal grounds, in accordance with data protection laws and regulations:
- Contractual necessity – to provide goods and services.
- Legal obligation – compliance with laws and regulations.
- Legitimate interest – fraud prevention, marketing, and service improvement.
- Consent – In certain cases, we may ask for your explicit consent to process your personal data for specific purposes. For example, we might request your consent to send marketing emails, collect specific data, or use sensitive personal data in particular contexts. You can withdraw your consent at any time, and doing so will not affect the legality of the data processing before you withdrew consent.
We take all necessary measures to ensure the privacy and protection of your personal data in line with these legal bases.
Changes to this Privacy Notice
This Notice was last updated on Friday, 14 February 2025.
