Privacy Policy

Introduction

Araya (“we”, “us” or “our”), operated by Araya Concepts Pte Ltd (the “Company”), respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you interact with us, including through our website, reservations and marketing communications.

Personal Data We Collect

We may collect the following personal data:

• Name
• Contact details (email address, phone number)
• Reservation details (date, time, party size)
• Dining preferences (including dietary requirements, allergies and special occasions)
• Guest notes and visit history
• Payment-related information (including deposits where applicable)
• Marketing preferences and communication history
• Website usage data (via cookies and analytics tools)
• CCTV footage captured on our premises

How We Collect Your Data

Your personal data may be collected when you:

• make a reservation via our website or third-party platforms (e.g. SevenRooms, Chope, DiningCity)
• contact us via email, phone or online forms
• subscribe to our mailing list or marketing communications
• interact with our website (including through cookies and tracking technologies)
• engage with our advertisements on digital platforms

How We Use Your Data

We use your personal data for the following purposes:

• to manage and confirm reservations
• to provide and personalise your dining experience
• to communicate with you regarding bookings and enquiries
• to send marketing communications where you have consented
• to improve our services, offerings and customer experience
• to process payments and deposits
• to ensure the safety and security of our premises, including through CCTV
• to comply with legal and regulatory obligations

Consent

By providing your personal data to us, you consent to our collection, use and disclosure of your personal data for the purposes set out in this Privacy Policy.

Where required, we will obtain your explicit consent, particularly for marketing communications. In other situations, such as when you make a reservation, consent may be deemed to have been given for the relevant purposes.

You may withdraw your consent at any time by contacting us. Please note that withdrawing consent may affect our ability to provide you with certain services, including reservations and guest-related services.

Marketing Communications

With your consent, we may contact you via:

• email (EDMs)
• WhatsApp messages

You may withdraw your consent at any time by clicking the unsubscribe link in our emails or contacting us directly.

Disclosure to Third Parties

We may share your personal data with trusted third parties where necessary, including:

• reservation and guest management platforms (e.g. SevenRooms and other booking partners)
• payment service providers (including third-party processors for deposits and transactions)
• marketing and advertising platforms (e.g. Meta, Google and similar platforms)
• IT service providers and analytics tools
• professional advisors where required

Where your personal data is transferred outside Singapore, we will ensure that the receiving party provides a standard of protection comparable to that under the PDPA.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• understand user behaviour and website performance
  improve user experience
• support marketing and advertising efforts

This may include the use of tools such as Google Analytics and advertising tracking technologies. These technologies may collect information such as IP address, browser type and pages visited.

You may manage cookie preferences through your browser settings.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

Protection of Personal Data

We implement reasonable administrative, technical and physical safeguards to protect your personal data against unauthorised access, collection, use, disclosure or similar risks.

In the event of a data breach, we will take appropriate steps to assess and manage the incident in accordance with applicable laws and regulatory requirements.

Your Rights

Under the PDPA, you have the right to:

• request access to your personal data
• request correction of inaccurate data
• withdraw consent for the use of your personal data

We will respond to such requests within a reasonable timeframe. Requests may be subject to reasonable administrative fees where permitted by law.

Children’s Privacy

We do not knowingly collect personal data from individuals under the age of 13 without appropriate consent from a parent or guardian.

Contact Us

If you have any questions or requests regarding your personal data, please contact our Data Protection Officer at reservations@arayarestaurant.com.

Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Last Updated: 14 April 2026