Privacy Policy


Gourmet Burger Kitchen Limited (“Gourmet Burger Kitchen or “we” or “us) takes its commitment to privacy very seriously and would advise you to read this policy closely. This privacy policy (‘Privacy Policy’) may change from time to time, so please check it frequently.

This Privacy Policy sets out the basis on which your personal data which we collect from you will be processed by Fishbowl, and controlled by us, Gourmet Burger Kitchen Limited, 1 Lindsey Street, London, EC1A 9HP.

Data we collect

We only collect basic personal data from you that may include name, address, email address, mobile phone number, date of birth. We process this data on the basis of your consent or for our legitimate business interest in providing marketing to you in relation to a product or service that you have bought, or in relation to customer services if you've asked us a question or raised a complaint.

We automatically receive your location, IP address and data about your browser or mobile platform when you are using our Mobile Application (‘App’). We process this data as necessary for the provision of the service provided when using our website and/or App.

You must be over the age of 13 to give your consent to opt into our marketing emails, and for us to hold your data.

How we use your data

We use your information in the following ways;

·         To ensure that content on our website or app is presented in the most effective way for you and the device you are using

·         To allow you to register with us on our website where you choose to do so

·         To notify you about changes to our services

For  For the purposes of dealing with any question or complaint you have contacted us about 

·         In accordance to what you have communicated to us at the point in which you registered; If you have given your consent:

o   To keep you updated with the latest information about our menus, services and special offers

o   To send you information that we think you will want to receive or that would benefit you and your experience with us

Where we transfer and store it

All information that you provide to us is stored in secure servers which are operated by trusted providers. We oblige all of our partners to sign contracts with us that clearly set out their commitment to respecting your Individual Rights, protecting your personal data – including not using it for any purpose other than for the agreed purposes - and their commitments to assisting us to help you exercise your Individual Rights.

Our trusted providers include Fishbowl, Inc. Fishbowl, Inc. use servers stored in the United States of America. Your data will be transferred in these servers for us to provide you with the services in conjunction with Fishbowl, Inc.  Fishbowl, Inc. take all reasonable measures to ensure that your personal data is adequately protected, that it is not retained beyond appropriate periods and that you can exercise your Individual Rights. Fishbowl, Inc. have also applied for EU-U.S. Privacy Shield certification. Additionally, Gourmet Burger Kitchen have entered into EU-approved Standard Contractual Clauses with Fishbowl, Inc. to further ensure that they take steps to secure your personal data and notify us in the case of any data breaches.

You can view Fishbowl’s Privacy Policy here and GDPR Statement here.

In terms in other third parties, we work with Marketforce to collate and manage our customer services contacts. Their privacy policy can be found here.

We also work with Surefoot who look after our food safety compliance. Their privacy policy can be found here.

We may also transfer your personal data – that may include name, address, email address, mobile phone number, date of birth – to our marketing partners for the purposes of providing marketing to you, if you have given your consent for this.

We cannot be held responsible for any other third party data collection processes, or privacy policies that are not operated by us, including social media platforms and networks that may collect your personal data. If you do wish to enquire about their privacy policies and how your data is being handled by them, you must contact them directly.

How long we keep it

We will keep your contact information for three years, after which we will ask you again for consent to continue to receive marketing information from us. When using our App, we will also keep the personal data that we collect from you for as long as you use our App.

In both circumstances, you have the right at any time to notify us that you no longer want to receive this information. You can exercise this right to opt-out by contacting our office at

More information on our retention schedule can be found online at

Your Individual Rights

If at any point you believe that the information we process on you is incorrect, you can request to see this information and have it restricted, corrected or deleted on our systems. If you wish to raise a complaint on how we have handled your personal data, you can contact our office at and we will investigate the matter.


Applicant Privacy Notice

At Gourmet Burger Kitchen Limited (‘GBK’ or ‘we’), we want to ensure that we consider your privacy seriously. We will ensure that the information you submit to us as part of the recruitment process is only used for the purposes set out below. We will only process such data as agreed with you and as provided to you by us or by other sources that we will identify.

This Privacy Notice sets out how your personal data will be processed as controlled by Gourmet Burger Kitchen Limited, 1 Lindsey Street, London EC1A 9HP.

Data we collect: 

We only collect your personal data when you submit an application to us using this website, when you e-mail us your details or as we receive from any agencies we use for recruitment purposes or to whom you pass your personal data.

Your personal data that we process will include:

·        Full name

·        Contact details

·        Date of birth

·        Qualifications and employment history

·        Interview notes during your application

·        Racial, ethnic, sexual, religious and/or disability information

·        Information about any medical conditions

·        Passport and other identification details

·        Information about past criminal convictions 

How we use your data:

We will use your personal data for the following purposes:

·        processing your application;

·        respond to queries from you;

·        offering you future positions

We will only do so either with your consent, where it is in our legitimate business interest to do so, where we have a legal obligation to do so, or where necessary for entering into the performance of a contract with you.

More information about how your data will be used by GBK during recruitment and selection will be provided as part of the recruitment process.

Who we share it with:

We may share your personal data with the recruitment agency that you applied with, where applicable. Moreover, in addition to our systems, if you applied through our jobs website the information that you provide to us may be stored in secure servers which are operated by trusted providers. We oblige all of our partners to sign contracts with us that clearly set out their commitment to safeguarding the security of your personal data, not using it for any purpose other than for the purposes above, and ensuring their commitment to assisting us to help you exercise your Individual Rights.

During the application and recruitment process, your personal data will be stored on our database provided by Eploy on data centres based in the UK. Following your successful employment, much of your data will be transferred to our secure database provided by Fourth Hospitality. Fourth Hospitality uses servers based in the European Economic Area (EEA) apart from for Fourth Analytics, which uses servers based in the United States of America on a basis that is compliant with the EU-U.S. Privacy Shield framework.

You can view Eploy’s Privacy Policy here and Fourth’s Privacy Policy here.

How long we keep it for:

We will hold your application data for a period of 18 months from your application after which we will delete this information. We will only extend this period on the basis of your consent or in the event of you being successful awarded a position.

What your rights are:

At any time during the recruitment process, you have the right to:

·        Request a copy of your personal information

·        Request any inaccuracies in your personal information be corrected

·        You may also ask to object or restrict the processing of your personal data and have your personal information erased, where appropriate

In addition, you can also withdraw your consent to us processing your application at any time.

In order to exercise your rights, please contact


Modifications and changes to the policy

Any changes made to this Privacy Policy will be updated on our website and you will be notified by email if necessary and appropriate.

If you have any questions about our website or our Privacy Policy, please contact