Privacy Notice
How your information is handled when you book a table using this page.
Who is responsible for your information
The restaurant you are booking with decides what information is collected and why. They are the data controller and they are responsible for your information. Their name is on the booking page you came from.
The booking system itself is built and run by Datatreehaus, a sole trader business in the United Kingdom, under the product name Thezi. Datatreehaus handles your information only on the restaurant's instructions, as their data processor.
For any question about your information, contact the restaurant first. They are responsible for it. If you cannot reach them, write to hello@thezi.app and we will pass it on.
What is collected
When you book a table:
- Your name
- Your email address
- Your phone number, if you give one
- The date, time and party size of your booking, and the table you are given
- Anything you write in the notes field
- Whether you agreed to hear from the restaurant, if they asked (see below)
- Card details, where the restaurant requires a card to hold the booking
About the notes field. This is there for things like allergies, dietary requirements and the occasion. Information about allergies and medical conditions counts as sensitive health information under UK data protection law and gets extra protection. By choosing to enter it, you are consenting to the restaurant and its kitchen staff using it to prepare for your visit. You do not have to enter it, though the restaurant may not be able to cater for you if you do not. If you would rather not type it here, phone them instead.
Hearing from the restaurant
Not every restaurant asks. The box only appears if the restaurant has chosen to ask, and it is off unless they turn it on. If you never saw a box, nothing was recorded and the restaurant may only contact you about your booking.
Where it does appear, it comes one of two ways, and the restaurant chooses which:
- An empty box you tick if you want to hear from them.
- A box that starts ticked, which you can clear before you book. UK law allows this only for a business's own similar offers, to someone they are serving, and only where you can opt out both then and in every message they send. If you leave it ticked, that is what you are agreeing to.
Either way:
- Your email address is added to that restaurant's list, and only that one. It is never shared with any other restaurant, on this platform or anywhere else, and it is never sold, rented or passed to advertisers.
- We record the date and the exact wording you were shown, so what you agreed to is a matter of record rather than a matter of memory.
- You can withdraw at any time, using the unsubscribe link in any message the restaurant sends, or by asking them directly. Withdrawing is recorded with its date and takes effect immediately.
- Booking a table is not agreement. If you were never asked — booking by phone, for instance — nothing is recorded either way, and the restaurant may only contact you about your booking.
- The restaurant can download its own list. Once they have, that copy is theirs to look after, so if you withdraw it is worth saying so to them directly as well as unsubscribing.
The waiting list
If you ask for a table when the restaurant is full, staff may add you to a waiting list for that day: your name, the size of your party, and usually a phone number so they can call when a table frees up. Notes they take are for seating you.
That list is kept after the day ends, so the restaurant can see how many parties it had to turn away. It is not a marketing list: being on it is not agreeing to hear from them.
Card details
If your booking requires a card to hold the table, your card details are collected and held by the restaurant's own payment provider. They go directly to that provider. Neither the restaurant nor Datatreehaus ever sees or stores your full card number.
The restaurant may charge a cancellation fee to that card if you cancel late or do not turn up, in line with the cancellation policy shown when you booked. That decision is always made manually by the restaurant's staff, never automatically by the system. Any query or dispute about a charge should go to the restaurant.
The payment provider has its own privacy policy covering how it handles your card details.
Why your information is used
- To take, confirm and manage your booking, and to contact you about it. This is necessary to perform the booking arrangement between you and the restaurant.
- To prepare for allergies or dietary requirements you have told them about, based on your consent.
- To send you marketing about that restaurant, if and only if you agreed — based on your consent, or, where the box came pre-ticked and you left it, on the soft opt-in UK law allows a business for its own similar offers.
- To hold your place on a waiting list when you have asked for a table and none is free, and to contact you about it.
- To charge a cancellation fee where the restaurant's policy allows it, based on the restaurant's legitimate interest in managing no-shows.
Who it is shared with
- The restaurant your booking is with.
- The restaurant's payment provider, for card holds and any cancellation charge.
- Cloudflare, which hosts the booking system, stores the booking data and sends the confirmation email.
Nothing else. This booking page loads no advertising and no tracking.
Where it is stored
Your booking information is stored on Cloudflare infrastructure in Western Europe (London). It is not transferred outside the UK or Europe by the booking system. The payment provider may transfer payment data internationally under its own safeguards, described in its own privacy policy.
How long it is kept
Each restaurant sets its own retention periods. Unless the restaurant has chosen otherwise:
- Anything you wrote in the notes field, including allergy and dietary information, is removed 12 months after your booking date.
- The rest of your booking record is deleted 24 months after your booking date.
- If you agreed to hear from the restaurant, that record is kept until you withdraw it. The record that you withdrew is kept afterwards, so the restaurant can show it stopped.
- A waiting list entry is closed at the end of the day it was for, and kept after that as part of the restaurant's record of how busy it was.
- Your card details are held in the restaurant's own payment provider account, under that provider's rules and the restaurant's accounting obligations. These are kept separately from the booking system and for longer, because businesses must keep payment records for six years. If you want them removed, ask the restaurant.
Cookies
This booking page does not use cookies and does not store anything on your device. It does not track you.
Your rights
You have the right to ask for a copy of your information, to have it corrected, to have it deleted, to object to how it is used, and to withdraw your consent — to marketing, or to the use of allergy and dietary information — at any time.
Because the restaurant is responsible for your information, please make these requests to them. They will pass anything on to Datatreehaus if a technical step is needed.
If you are not satisfied with how a request is handled, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If this notice changes, the updated version will be published here.
Last updated: 10 September 2026