The small print
Privacy notice
Draft structure. Legal wording to be reviewed.
The headings below show what this page needs to cover. The wording must be written or approved by the client and reviewed before launch.
Who we are
[To be reviewed: legal name of the business or sole trader, contact address and email for privacy questions]
What we collect
- Supper Club bookings: name, email, optional mobile number, number of tickets, allergies or dietary notes, and payment references from Stripe. We never see or store card details.
- Kitchen 48 orders: name, email, mobile number, the dishes ordered, any notes, a delivery address if delivery is chosen, and payment references from Stripe.
- Waiting lists and menu alerts: name, email, optional mobile number and what you asked to hear about.
- Private dining requests and enquiries: the details you send, including dates, guest numbers, location, dietary needs and budget.
- Marketing consent: whether you ticked the optional box to receive marketing emails, and when.
Why we use it, and our lawful basis
[To be reviewed: contract (to provide your booking), legitimate interests (waiting lists and replying to enquiries), consent (marketing emails, which you can withdraw at any time), and how allergy information is handled]
Who we share it with
We use these service providers to run the website and bookings:
- Stripe, to take payments
- Vercel, to host the website
- Supabase, to store booking and waiting list records
- TomCRM (built on HighLevel), to manage customer contacts
- An email provider, to send booking confirmations, once one is chosen
[To be reviewed: international transfers and safeguards for each provider]
How long we keep it
[To be reviewed: retention periods for bookings, waiting lists, enquiries and marketing lists]
Your rights
[To be reviewed: access, correction, deletion, objection, withdrawing consent, and how to make a request]
Complaints
[To be reviewed: right to complain to the Information Commissioner's Office (ico.org.uk)]