Privacy Policy

1. Overview

1.1 Make a Rezzy Ltd, a company registered in England and Wales under company number 16048393, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ ("Us", "We") respect your privacy and follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This privacy policy relates to https://www.makearezzy.com ("Our Site", "Our Website") and any other website sharing the same second-level domain name (makearezzy) managed by us (Make a Rezzy). This includes any subdomains of the aforementioned websites.

1.2 This privacy policy also relates to our Android and iOS mobile application (Make a Rezzy - Management) (“Our App”) which is owned and operated by Us.

1.3 Collectively, Our Website and Our App will be referred to as ("Our Platforms", "Our Services").

1.4 This document (“Privacy Policy”) will outline the information we collect, the purpose for such information, who is responsible for it and how we store it.

1.5 This Privacy Policy applies only to information we collect from Our Platforms and does not apply to any other sources of information.

1.6 We are registered with the Information Commissioner's Office under registration number ZB931454.

2. Who Is Responsible for Your Information

2.1 Restaurants and other businesses use Our Platforms to take bookings and manage their guests. Depending on how you use Our Platforms, either We or the business is responsible for your information (the "controller").

2.2 We are the controller of:

• your Make a Rezzy account, if you create one on Our Website, and the bookings and reviews you make through it;
• the accounts of business owners and staff who use Our Platforms;
• information about how you use Our Platforms, including analytics, security logs and advertising measurement.

2.3 The business is the controller of the information it holds about you as its guest. This includes bookings you make through the business' own website or booking widget, details the business adds itself (for example, notes or tags), your visit and spend history with the business, and whether you have agreed to receive marketing from it. We process this information on the business' behalf and under its instructions. If you have questions about it, or want to exercise your rights over it, please contact the business directly. If you contact Us, We will pass your request to the business.

2.4 When you book with a business through Our Website, We and the business each become responsible for the booking details: We hold them in your account, and the business holds them in its own guest records.

3. Information we Collect

3.1 We collect personal information such as your name, email address, and phone number when you create an account or make a reservation through our Platforms. We also collect information about your reservation, such as the date and time, the number of guests, and any special requests or requirements.

3.2 If you are a business owner, we collect information about your business such as your business name, address, phone number, email address, website address, and any other information you provide to us.

3.3 When you use Our Platforms we receive information that is provided by your web browser or device. This information includes information about your browser, language preference, referring site, IP address, information about your device, date and time of visit and operating system. This is logged so that We can monitor the performance of Our Site and analytics, We also log information for security purposes.

3.4 Our Platforms may request access to your devices camera and files. This is to allow you to upload photos and menus to your business profile. You may choose to deny this access, however, this will limit the functionality of Our Platforms.

3.5 Images and files uploaded to Our Platforms are stored on third-party cloud storage services. By uploading images and files to Our Platforms, you consent to Us storing your images and files on third-party cloud storage services.

4. Use of Information

4.1 We use the information we collect to facilitate the booking of reservations between restaurants (businesses) and guests, to improve our platform and services, and to communicate with you about your reservations and our services.

4.2 We may use your information to send you information concerning your reservation, such as confirmation emails, reminders, updates and requests to review your experience.

4.3 We use your email address to create a user account for you. We do this so that you can make reservations through our platform, can review your reservations and update your information.

4.4 For businesses, we use your information to create a business account for you. We do this so that you can manage your business information and reservations through our Platforms.

4.5 For businesses, any images and files you upload to Our Platforms will be used to enhance your business profile and improve the experience for your customers. Therefore, they will be made publicly available on Our Platforms.

4.6 When you make a reservation from a page you reached via an advert or campaign link, we record which campaign brought you there so that we, and the restaurant you booked with, can understand which marketing leads to reservations. This is reported to restaurants in aggregate; it is not used to build a marketing profile of you.

4.7 We rely on the following lawful bases:

• Contract - to provide your account, make your bookings and send you messages about them, and to provide Our services to businesses.
• Legitimate interests - to keep Our Platforms secure, fix errors, understand how Our Platforms are used and report to businesses which marketing brought them bookings.
• Consent - for non-essential cookies and the advertising measurement described in section 5.4. You can withdraw consent at any time as described in our Cookies Policy.
• Legal obligation - where the law requires Us to keep or disclose information.

5. Disclosure of Information

5.1 When you book with a restaurant through Our Website, we share your name, email address, phone number and reservation information with that restaurant so it can manage your booking. The restaurant then holds that information as its own guest record, as described in section 2.

5.2 We do not sell or rent your information to third parties.

5.3 We may also disclose your information if required by law or to protect our legal rights.

5.4 If you have accepted cookies, we share limited booking events (for example, that a booking page was viewed or a booking was completed, and the advertising campaign involved) with advertising platforms such as Meta and Google. This is used to measure and improve the advertising we run for restaurants on our platform. We do not share your name, email address or phone number with these platforms.

5.5 If a restaurant connects another system to Our Platforms, such as its point-of-sale or ticketing system, information about your bookings may be shared with that system on the restaurant's instruction.

6. Service Providers and International Transfers

6.1 We use trusted service providers to run Our Platforms, including hosting, file storage, email delivery, payment processing, push notifications, error and performance monitoring, and AI writing tools. They may only use your information to provide their service to Us. A list of the providers that process guest information on behalf of businesses is in Annex 2 of our Data Processing Agreement.

6.2 Our Platforms are hosted in the United Kingdom. Some of our service providers are based in, or process information in, other countries, including the United States. Where that happens, we protect your information with UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

7. Third-Party Analytics - Website Only

7.1 We only use third-party analytics on Our Website (not Our App). This section outlines how we use third-party analytics and how you can control the data that is collected.

7.2 We use third-party analytics to monitor traffic on Our Site for analytics purposes. We will only collect this information if you agree to us doing so by clicking "Accept" on the cookies policy banner that appears at the bottom of the page.

7.3 If you change your mind about allowing/disallowing us to capture data for analytical purposes, please delete all cookies, site data and cached data relating to Our Site and you will be prompted again after refreshing your page.

7.4 More information on how we use cookies can be found in our Cookies Policy.

8. Third-Party Links

8.1 Our Platforms may contain links to third-party websites or services. We are not responsible for the privacy practices of these third-party websites or services, and you should review their privacy policies before using them.

9. How Long We Keep Your Information

9.1 We keep your account information for as long as your account is open. You can ask Us to delete your account at any time.

9.2 Restaurants decide how long they keep their guest records. When a restaurant closes its account with Us, we delete its guest records within 90 days.

9.3 We keep invoices and payment records for as long as the law requires, which is usually six years.

10. Your Rights

10.1 You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how it is used, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

10.2 To exercise your rights over information we are responsible for, contact Us at support@makearezzy.com. For information a restaurant holds about you as its guest, contact the restaurant.

10.3 If you are unhappy with how your information has been handled, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve your concern first.

11. Children's Privacy

11.1 Our Platforms are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information without parental consent, please contact us.

12. Security

12.1 We take reasonable steps to protect your information from loss, misuse, and unauthorised access, disclosure, alteration, and destruction. However, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk.

13. Changes to This Privacy Policy

13.1 We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. Where a change is significant, we will let account holders know by email.