Privacy policy

The public pages are a source-controlled static website. It has no account system, content management system, application database or uploaded-media service. A narrowly scoped Vercel backend securely stores new Contact enquiries in Supabase.

Like any hosted website, basic request information may be processed by the DNS, security and hosting providers needed to serve the pages. The limited Web Analytics and Google Maps processing and the Contact enquiry service are described below.

The Visit page automatically loads an embedded Google Map showing the restaurant’s location. Loading the map sends a request to Google, including ordinary network and browser information such as your IP address, browser details and the site’s origin.

This website does not request your device location. The map and directions are provided by Google under its own privacy terms. You can still read the restaurant address and use the separate directions link if the embedded map is unavailable.

This site uses PostHog in the United States to measure visits to public pages, including missing pages. Reports may include the time, page category, device type, browser and operating system.

Query strings and fragments are removed before an event is sent. Unknown paths are reported only as /404/. The site also records three limited custom-event categories: selection of an enabled restaurant action and its page placement; selection of a menu category or one of five featured dishes; and whether the Contact service accepted an enquiry.

Restaurant-action events use only the fixed action values Menu, Visit, Contact, Directions and Order plus a fixed placement category. Menu-interest events use only a source-owned category or featured-dish identifier plus a fixed placement category. An accepted-enquiry event has no custom properties. Analytics events exclude Contact form values, names, contact details, messages, booking details, referrers, query strings, fragments, provider identifiers, error details, browser-storage values, session replays and advertising profiles.

PostHog uses the IP address, browser user agent and site hostname to estimate unique visits for the day. It uses these inputs to compute a daily visitor hash and removes the IP address and raw user agent before enriching the event. The site does not set analytics cookies, store analytics identifiers in your browser or create named visitor profiles. Read PostHog’s privacy policy for more information.

The Contact form collects your full name and email address. General enquiries also collect your message and may include an optional phone number. Booking requests collect your phone number, preferred date and time, party size, and any optional notes. The website sends those details through a same-origin Vercel Function and stores accepted enquiries in the restaurant’s access-controlled Supabase enquiry database.

A designated restaurant administrator reviews that queue each business day. Accepted enquiry records are deleted after 12 months. Internal notes, conversation replies and associated delivery records follow the same retention period. The website reports success only after the database stores the enquiry; failed attempts remain in the form for you to retry.

Cloudflare Turnstile checks whether a submission appears legitimate before it is stored. Turnstile receives its verification token and ordinary request information, but this website does not send your form fields to analytics, browser logs or unrelated storage.

Approved staff use Google sign-in to access the enquiry inbox. Secure session cookies keep staff signed in for up to eight hours. Internal notes and status history record which staff account made each change. The staff area is excluded from website analytics.

Resend sends an acknowledgement to the email address you provide and delivers an alert to designated staff for each accepted enquiry. The acknowledgement confirms receipt, not a booking; neither email repeats your submitted message or booking details. Staff alerts link to the protected inbox. Older enquiries remain in the restaurant’s access-controlled historical system until their retention period ends.

When the restaurant’s Telegram reply service is enabled, your name, email, phone number if supplied, enquiry or booking details, and replies are also sent to a private staff Telegram group. Staff can use the supplied phone number to call you. Approved staff can reply there, and Resend emails their response to the customer. If you reply to that email, Resend receives the email text and routing details so your response can return to the staff group. Staff write these responses; the service does not make automatic booking decisions.

The reply service supports text only, so do not rely on it to deliver attachments. Telegram, Resend and email recipients may keep copies under their own retention practices; deleting a record from the restaurant’s database does not remove those copies.

To limit repeated submissions, the server temporarily keeps a keyed, non-readable representation of the request’s IP address. It does not store the raw IP address with the enquiry.

This site does not write Contact values to cookies, local storage, session storage or IndexedDB. On small screens, the Menu stores only the source-owned identifiers of sections you chose to collapse in local storage so it can restore that display preference. The saved preference is not read into or sent to Analytics. Separately, selecting a menu category may record that category’s fixed identifier as described above. Cloudflare Turnstile and the embedded Google Map are third-party services and may use browser data according to their own settings and privacy terms.

The directions link opens Google Maps, the Visit page embeds Google Maps automatically, and the Contact page loads Cloudflare Turnstile when the enquiry service is available. Those providers’ privacy terms and data practices apply to their services.

A public phone number and email address have not yet been approved for this site. Use theContact form for an online privacy enquiry. If the form is unavailable, please speak with the restaurant in person at the verified address on the Visit page.