Privacy

What we store when you book a table

Your name, email address and telephone number; the date, time and size of the booking; anything you typed into the requests or dietary boxes; whether you ticked the marketing box and when; and the IP address the booking came from, which is kept for spam protection. Nothing else. There is no payment information because the form does not take any.

The dietary box

What you write there is health information about you, and it is treated that way. It goes to the kitchen and to the person running the floor for that service and is not used for anything else, ever. It is deleted with the rest of the booking record on the schedule below, and it is never included in a marketing list.

The guest record

Booking twice from the same email address links the two, so the floor view can show that you have been here before. That record holds your name, email, telephone number, a count of visits and the date of the last one. It exists so that somebody can recognise a regular, which is a reasonable thing for a restaurant to want and a thing you are entitled to know is happening.

Marketing

Only if you ticked the box, and the date you ticked it is stored alongside the consent. Not more than monthly. Every message carries a one-click unsubscribe link that works without signing in to anything, and using it removes you from the list immediately rather than "within 30 days".

Ticking the box a second time does not add you twice. Un-ticking it on a later booking does not silently revoke a consent you gave earlier — the unsubscribe link is how you withdraw it, and that is deliberate rather than an oversight.

How long it is kept

• Reservations: two years, then deleted.
• Dietary and request notes: deleted with the booking they belong to.
• Guest records: until you ask us to remove them, or three years after the last booking.
• Marketing consent: until you unsubscribe.
• Email delivery log: ninety days.
• Spam-protection IP records: twenty-four hours.

Who can see it

Two roles. A host sees today and tomorrow only — the arrivals, the party sizes and the notes for the service they are working. A manager sees the whole book and the guest list. Nobody else has an account, and the restriction is enforced by the software rather than by hiding links in the interface.

Who we share it with

Nobody. No analytics service, no advertising network, no reservation platform, no third-party booking aggregator. The booking software runs on this site's own hosting; the outbound email goes through the mail server belonging to the same account. There are no third-party scripts on this website at all, which is why there is no cookie banner — there is nothing to consent to.

Cookies

One, and only if you sign in to the staff area: a session cookie that logs you out after two hours. Visitors to the public site are not given a cookie of any kind.

Getting your data, or having it deleted

Ask, on 000-000-0000 or through the contact page, and it is done the same week. You do not have to give a reason. If you have an upcoming booking we will confirm you still want it before deleting the record it lives in.

This is a demonstration site. Woodside Table is a fictional restaurant. The booking software described above is real and does store what this page says it stores — so if you put a real email address into the form, that address is genuinely in a database. Please use the contact page if you would like it removed.