Privacy Policy

Gather & Devour maintains a commitment to protecting customer privacy while collecting essential data for table bookings. This updated policy incorporates best practices for data handling specific to restaurant operations.

It reflects standard compliance with laws like GDPR and PCI DSS.Information CollectedGather & Devour collects names, phone numbers, email addresses, booking details (date, time, party size), and optional preferences like dietary needs or allergies during reservations. Transaction data such as payment methods may be recorded for deposits, but full card details are not stored. Feedback from surveys or reviews is also gathered to improve service.

Data Usage Practices Data confirms reservations, sends reminders, manages waitlists, and personalizes experiences like allergy alerts. It analyzes trends in visit frequency, spend, and preferences to optimize operations and menu offerings. Marketing uses occur only with opt-in, such as loyalty program sign-ups

Sharing and Security Measures Information shares solely with secure providers like POS or reservation systems under contracts ensuring encryption and access controls. No sales to third parties; disclosures happen only for legal needs or business transfers.

Data retains for 2 years post-visit or as required by law, then deletes securely Customer RightsRequest access, updates, deletion, or opt-outs anytime via email; responses occur within 30 days. Staff training and audits uphold security. Policy updates notify recent bookers by email.