Privacy Policy
This policy explains what personal data VenueFloor, operated by TODO legal name, collects, why, and how it is protected — both for venue staff using the back-office and for guests booking a table.
1. Data we process
Venue staff: name, e-mail, password hash, role, language. Guests: name, e-mail, phone number, party size, date and time, notes you add to a booking, language, and whether a deposit was paid. Technical data: IP address and browser information for security and abuse prevention.
2. Why we process it
To run reservations (availability, confirmations, reminders, cancellations), to let venues manage their team, to bill subscriptions, to secure the service, and to comply with legal obligations. Legal bases: performance of the contract with the venue, the venue's legitimate interest in running its bookings, and consent where required for marketing.
3. Payments
Deposits are processed by the payment provider the venue connects (for example Stripe) under that provider's own terms; we store only references and amounts, never card details. Subscriptions are processed by Paddle.com as merchant of record.
4. Where data lives and who sees it
Data is hosted in the European Union (Frankfurt). It is visible to the venue that holds the booking and to VenueFloor support staff when needed to help you. Sub-processors: our database, e-mail, SMS, file storage and payment providers, each bound by data-processing terms.
5. Retention
Bookings and customer records are kept for as long as the venue keeps its account, so regulars are recognised and disputes can be settled. Closed accounts are deleted within 90 days except where the law requires longer retention of billing records.
6. Your rights
You can ask to access, correct, export or delete your personal data, and object to certain processing. Guests should contact the venue first (it controls the booking); you can also write to support@venuefloor.com. You may lodge a complaint with your data-protection authority.
7. Cookies
We use strictly necessary cookies only: session, language preference, and anti-abuse verification. No advertising trackers.
Questions about these documents: support@venuefloor.com.
Draft for review. The founder must have this text validated for each market before launch.