These documents are being finalised. Any details marked “to follow” will be added shortly.
Information security statement
This statement explains how Capri Mirfield, Capri Newmillerdam and Capri @ The Vine look after the personal information of customers and staff.
Who we are
Capri Group is the name we use for three restaurants. Each restaurant is run by its own limited company, and that company is responsible for your booking and for any personal information it holds about you.
| Restaurant | Company | Company number | Registered office | ICO registration |
|---|---|---|---|---|
| Capri Mirfield | Capri Mirfield Ltd | 15453883 | 79 Old Bank Road, Mirfield, England, WF14 0HY | ZB789665 |
| Capri Newmillerdam | Kos Kir (Dam) Ltd | 17071063 | Unit 9 Sheepscar Way, Leeds, England, LS7 3JB | (details to follow) |
| Capri @ The Vine | Kos Kir (Vine) Ltd | 17071129 | Unit 9 Sheepscar Way, Leeds, England, LS7 3JB | (details to follow) |
All three companies are registered in England and Wales. Restaurant addresses and phone numbers: (details to follow).
Privacy contact for all three restaurants: (details to follow).
Paper records
Staff records on paper are kept in a locked filing system. (details to follow)
Electronic records
Bookings and customer marketing preferences are held in our booking system, Togo. Payroll and accounting records are held by our accountants. Card payments are processed by Global Payments, and we do not store card details. Orders and payments are recorded on our till system, Lightspeed. Our business email and office systems run on Microsoft 365.
IT management
Our IT, network and customer Wi-Fi are managed by Leeds IT Services Ltd under a service contract. Office computers have business antivirus software and receive security updates automatically. Incoming email passes through an email security service that filters out spam, phishing and harmful attachments.
Network and Wi-Fi
Each restaurant runs a managed UniFi network. The free customer Wi-Fi is a separate guest network: devices on it cannot reach our tills, card machines, office computers or CCTV, or each other. Staff and guest Wi-Fi passwords are changed regularly and whenever a member of staff with access leaves.
Who can see information
Staff can only see the information they need for their job. Everyone uses their own login for email and office systems, and passwords are not shared. When someone leaves, their access is removed and shared passwords they knew are changed. Our staff IT and data policy sets out the rules staff must follow.
Suppliers
We only use suppliers who agree to protect personal information and to use it only on our instructions.
CCTV
CCTV recordings are stored on a recorder at each restaurant, viewed only by managers and directors on site or through a secure, password protected app, and overwritten automatically after about 30 days. See our CCTV policy.
If something goes wrong
If personal information is lost, stolen, sent to the wrong person or accessed without permission, staff must tell (details to follow) straight away. We will look into it, limit the harm, and keep a record. If the breach is likely to put people's rights at risk, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and tell the people affected without delay where the risk to them is high. The full steps are in our data procedures.
Review
We review this statement once a year, and whenever we change our booking system, payment provider, CCTV, marketing or staff systems.
Last updated: 3 November 2026