Privacy policy

Who is responsible for your data?

Seateat is the data controller for personal data collected through this website. For privacy enquiries, contact us via the contact page.

What data we collect

• Account data: name, email address, phone number, and password when you register or sign in.
• Booking data: reservation details, party size, special requests, and allergy information when you make a booking.
• Restaurant data: business details you provide when listing a restaurant, including address and contact information.
• Technical data: IP address and consent choices when you interact with our cookie banner.

How we use your data

We process personal data to:

• provide account access, bookings, and restaurant management features;
• process subscription payments through Stripe;
• keep our platform secure and prevent abuse;
• record your cookie consent choices where required by law;
• improve the service when you opt in to analytics cookies.

Legal bases for processing

• Contract: processing needed to provide the service you sign up for, such as bookings and account management.
• Legitimate interests: keeping the platform secure and operating core functionality.
• Consent: optional functional and analytics cookies, which you can change at any time via cookie settings.
• Legal obligation: retaining records where required by applicable law.

Cookies and similar technologies

We use the following categories of cookies:

• Essential cookies — always active. These include the seateat_session cookie used to keep you signed in. They cannot be switched off because the site would not function correctly without them.
• Functional cookies — optional. These support enhanced features such as interactive maps on restaurant management forms.
• Analytics cookies — optional. These help us understand how visitors use the site. We only enable them if you accept them in the cookie banner.

Your choices are stored in your browser and, where applicable, logged on our servers with a timestamp and IP address so we can demonstrate compliance with UK and EU GDPR requirements.

Data sharing

We share data with service providers that help us run Seateat, including payment processing (Stripe) and mapping services (Google Maps) when you opt in to functional cookies. We do not sell your personal data.

Retention

We keep account and booking data for as long as your account is active and as needed to meet legal, accounting, or reporting requirements. Consent records are retained to demonstrate compliance with privacy law.

Your rights

If you are in the UK or EEA, you have rights to access, rectify, erase, restrict, or object to certain processing of your personal data, and to data portability where applicable. You may also withdraw consent for optional cookies at any time without affecting the lawfulness of processing before withdrawal.

You can lodge a complaint with your local data protection authority if you believe we have not handled your data properly.

International transfers

Some service providers may process data outside the UK or EEA. Where this happens, we rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and may ask you to review your cookie preferences again.