Privacy & your data

• Booking & contact — name, email, phone, billing details.
• Guest details — for each seat: name and, optionally, contact, date of birth and an occasion.
• Dietary & allergy information — to prepare your meal safely. Allergy/health data is a special category and is provided voluntarily.
• Accessibility needs — to make your visit comfortable.
• Delivery address — to send your personal invitation/gift before the event.
• Payment — handled by Stripe; we never see or store your full card number.

• To deliver the booking you requested and host your evening — performance of a contract.
• To prepare meals around dietary and allergy needs — your explicit consent, given when you provide them.
• To send your invitation/gift and service messages — contract / legitimate interest.
• To meet tax and accounting obligations — legal obligation.

When you first visit, a banner asks whether we may use anonymous visitor statistics. Until you say yes, nothing is sent and nothing is stored on your device. This is entirely optional — the site works the same either way.

If you accept, our own measurement tool (VenueVista, operated by us — no ad networks, no data brokers) records:

• Which pages you view and how you move through the site (e.g. scrolling, opening the menu or seat map).
• How you found us — for example a search engine, a campaign link or a partner/influencer link (a short campaign code, never your identity).
• A random visitor number stored on your device (no name, email or anything personal), plus, where applicable, the campaign code. These are the only things we store on your device, and only after you accept.
• If you book, the booking is linked to that anonymous visitor number so we can tell which campaigns actually lead to bookings.

Legal basis: your consent (Art. 6(1)(a) GDPR; §25 TDDDG for device storage). Changing your mind: use the “Cookie Settings” link in the footer at any time — declining removes the stored identifiers from your device immediately. Statistics are kept in anonymous form and deleted or aggregated after at most 24 months.