Hospitality in 1
Privacy policy
This policy explains how Hospitalityin1 Holdings Ltd uses personal data when you visit hospitalityin1.co.uk, contact us, or use the Hospitality in 1 app through a restaurant.
Who we are
Hospitalityin1 Holdings Ltd (company number 17285032) is responsible for the personal data described here. Our registered office is 108–110 New Kings Road, London SW6 4LY.
Restaurants and their guests
When a restaurant uses Hospitality in 1, the restaurant is the controller of its guests’, staff and order data, and Hospitalityin1 Holdings Ltd acts as its processor under our agreement with the restaurant. Guests should contact the restaurant first about their data; we will help the restaurant answer.
What we collect
Depending on how you use the service, we may process:
- staff name, email address and role;
- guest names and booking details entered by the restaurant;
- orders and payment records. Card details are handled by the payment provider and are not stored by us; and
- information you include in a contact-form submission, such as your name, email address and message.
We may also receive limited technical information needed to deliver and secure the site, such as request logs and device or browser information.
Why we use it
We use personal data to provide and support the app, manage restaurant accounts and staff access, help restaurants manage bookings and service, keep order and payment records, answer enquiries, maintain security, and meet legal or accounting requirements.
Our legal bases
We rely on performance of a contract where the data is needed to provide the service or respond to an agreed business relationship. We rely on legitimate interests to operate, secure and improve the service, support restaurants, keep appropriate business records and respond to enquiries, balancing those interests against people’s rights. Where another legal basis is required, we will explain it at the point of collection.
Who we share it with
We use processors that help us provide the service: hosting providers, the payment provider, email providers and an AI assistant provider. They process data only for the services they provide to us and under appropriate contractual controls. We do not sell personal data.
How long we keep it
We keep personal data only for as long as it is needed for the purpose collected, and then delete or anonymise it where practical. Staff account data is kept while the account or relationship is active and for any necessary legal or security period. Guest booking details are kept for the restaurant’s operational needs and any applicable legal requirements. Order and payment records are kept for operational, accounting and audit requirements. Contact-form submissions are kept for as long as needed to answer the enquiry and manage the resulting relationship.
Retention periods are reviewed regularly and may be longer where the law requires them to be.
Your UK GDPR rights
Subject to applicable limits, you can ask us for access to your personal data, correction of inaccurate data, erasure, restriction of processing, or portability where that right applies. You can object to processing based on legitimate interests and withdraw consent where we rely on consent. To make a request, email info@hospitalityin1.co.uk. You also have the right to complain to the Information Commissioner’s Office.
Contact
Questions about this policy or your data can be sent to info@hospitalityin1.co.uk, or by post to Hospitalityin1 Holdings Ltd, 108–110 New Kings Road, London SW6 4LY.