<h1 style="color:#2d2a26;padding-top:9rem;">Confidentiality and Data Privacy Policy</h1>

<h2 style="color:#2d2a26;">1. Purpose</h2>
<p style="color:#2d2a26;">This Confidentiality Policy outlines the responsibilities of employees, contractors, and affiliates of JKS Restaurants in maintaining confidentiality and protecting sensitive company information during and after their employment.</p>
<p style="color:#2d2a26;">This policy ensures:</p>
<ul style="color:#2d2a26;">
    <li>Protection of guest, employee, and company data.</li>
    <li>Compliance with UK GDPR, Data Protection Act 2018, and ICO guidelines.</li>
    <li>Prevention of unauthorised access, data breaches, and reputational harm.</li>
    <li>Enforcement through disciplinary action, up to summary dismissal for gross misconduct.</li>
</ul>

<h2 style="color:#2d2a26;">2. Duty of Confidentiality</h2>
<p style="color:#2d2a26;">Employees must not disclose any company information to unauthorised third parties unless:</p>
<ul style="color:#2d2a26;">
    <li>It is required for legitimate business purposes.</li>
    <li>Explicit written authorisation is provided by the employee’s Head of Department.</li>
</ul>
<p style="color:#2d2a26;">Confidentiality obligations apply during and after employment with JKS Restaurants.</p>

<h3 style="color:#2d2a26;">2.1 Scope of Confidentiality</h3>
<p style="color:#2d2a26;">The duty of confidentiality includes:</p>
<ol style="color:#2d2a26;">
    <li>Duty of Fidelity – Employees must not disclose confidential information during or post-employment.</li>
    <li>Equitable Duty of Confidence – Trade secrets are protected indefinitely and must never be disclosed, even after employment ends.</li>
    <li>Contractual Obligations – Employees must comply with confidentiality clauses in their employment contracts.</li>
</ol>

<h2 style="color:#2d2a26;">3. Confidential Information Covered</h2>
<p style="color:#2d2a26;">Confidential information includes but is not limited to:</p>

<h3 style="color:#2d2a26;">3.1 Guest Data</h3>
<ul style="color:#2d2a26;">
    <li>Personal details (name, contact information, allergies, preferences).</li>
    <li>Reservation history, receipts, bills, and transactions.</li>
    <li>Public figure/VIP guest visits and spending habits.</li>
    <li>Guest complaints or feedback shared in confidence.</li>
</ul>

<h3 style="color:#2d2a26;">3.2 Employee Data</h3>
<ul style="color:#2d2a26;">
    <li>Payroll, HR files, performance reviews, personal records.</li>
    <li>Medical information, disciplinary records, employment history.</li>
</ul>

<h3 style="color:#2d2a26;">3.3 Business & Operational Information</h3>
<ul style="color:#2d2a26;">
    <li>Financial reports, marketing strategies, supplier contracts.</li>
    <li>Internal policies (recipes, training materials, SOPs, IT security access codes).</li>
    <li>Guests databases, trade secrets, operational manuals.</li>
</ul>

<h3 style="color:#2d2a26;">3.4 Trade Secrets</h3>
<ul style="color:#2d2a26;">
    <li>Exclusive recipes and preparation techniques.</li>
    <li>Proprietary supplier agreements.</li>
    <li>Operational strategies and procedures.</li>
</ul>
<p style="color:#2d2a26;">Trade secrets must never be disclosed, even after employment ends.</p>

<h2 style="color:#2d2a26;">4. Guest & Employee Data Protection Guidelines</h2>
<ul style="color:#2d2a26;">
    <li>Employees must only access guest or employee information when required for work-related purposes.</li>
    <li>Guest details must never be shared externally or with unauthorised employees.</li>
    <li>Personal guest or employee data (bills, receipts, transaction records) must not be photographed, shared, or posted online.</li>
    <li>Employees must not disclose guest interactions, preferences, or feedback to the media or external parties.</li>
</ul>

<h2 style="color:#2d2a26;">5. Booking System & IT Access Restrictions</h2>
<ul style="color:#2d2a26;">
    <li>Employees must not access the booking system for personal reasons.</li>
    <li>Accessing guest or company data out of curiosity is strictly prohibited.</li>
    <li>All system access is monitored and audited.</li>
    <li>Unauthorised access is considered gross misconduct and will result in summary dismissal.</li>
</ul>

<h2 style="color:#2d2a26;">6. Handling of Public Figures & VIP Guests</h2>
<ul style="color:#2d2a26;">
    <li>Employees must not take or share photos/videos of any guest, including VIPs or public figures.</li>
    <li>Employees must not disclose visit details, food preferences, or transactions.</li>
    <li>Employees must prevent other guests from approaching VIPs unless permitted.</li>
    <li>All media inquiries must be referred to the Marketing Director.</li>
</ul>
<p style="color:#2d2a26;">Violations will result in disciplinary action, up to and including summary dismissal.</p>

<h2 style="color:#2d2a26;">7. Social Media & External Communication</h2>
<ul style="color:#2d2a26;">
    <li>Employees must not share confidential information on social media, blogs, or public forums.</li>
    <li>Only authorised employees can handle media and press inquiries.</li>
    <li>Employees must not engage with journalists or arrange media appearances without prior approval.</li>
</ul>

<h2 style="color:#2d2a26;">8. Legal Framework & GDPR Compliance</h2>
<p style="color:#2d2a26;">JKS Restaurants processes and protects personal data under:</p>
<ul style="color:#2d2a26;">
    <li>UK GDPR & Data Protection Act 2018</li>
    <li>ICO Guidelines on Data Protection</li>
    <li>Employment Rights Act 1996</li>
</ul>
<p style="color:#2d2a26;">Legal Responsibilities:</p>
<ul style="color:#2d2a26;">
    <li>Lawful Processing – Data is only collected and used for legitimate business purposes.</li>
    <li>Data Minimisation – Employees must only access the necessary data for their role.</li>
    <li>Security Measures – Confidential data must be encrypted and stored securely.</li>
    <li>Right to Access & Erasure – Guests and employees may request access or deletion of their personal data.</li>
</ul>

<h2 style="color:#2d2a26;">9. Exceptions to Confidentiality</h2>
<p style="color:#2d2a26;">Confidentiality obligations may not apply if:</p>
<ul style="color:#2d2a26;">
    <li>Disclosure is required by law or regulatory authorities.</li>
    <li>Explicit consent is given by the company.</li>
    <li>The information has entered the public domain legally.</li>
    <li>The employee unknowingly disclosed the information without intent (accidental exposure).</li>
</ul>

<h2 style="color:#2d2a26;">10. Breach of Confidentiality</h2>
<p style="color:#2d2a26;">Breaches of confidentiality are taken seriously. Consequences may include:</p>
<ol style="color:#2d2a26;">
    <li><strong>Disciplinary Action:</strong>
        <ul style="color:#2d2a26;">
            <li>Formal warning for minor breaches.</li>
            <li>Suspension or further investigation for moderate breaches.</li>
            <li>Summary dismissal for gross misconduct for severe breaches.</li>
        </ul>
    </li>
    <li><strong>Legal Actions:</strong>
        <ul style="color:#2d2a26;">
            <li>Injunctions or legal claims for damages due to financial loss.</li>
            <li>Report to the ICO in cases of serious data breaches.</li>
        </ul>
    </li>
    <li><strong>Contractual Consequences:</strong>
        <ul style="color:#2d2a26;">
            <li>Employees may be held liable for damages caused by unauthorized disclosure.</li>
            <li>Post-employment restrictions may apply in accordance with employment contracts.</li>
        </ul>
    </li>
</ol>
<p style="color:#2d2a26;">Any unauthorised access, misuse, or disclosure of confidential data will result in summary dismissal.</p>

<h2 style="color:#2d2a26;">11. Employee Responsibility & Reporting</h2>
<ul style="color:#2d2a26;">
    <li>Employees must report any suspected breaches to Shikha Handoo (Senior People Partner) or Senior Management.</li>
    <li>Employees must complete mandatory confidentiality & GDPR training.</li>
    <li>Failure to comply will result in strict disciplinary measures.</li>
</ul>

Privacy

Pages

Single job pages