Privacy Policy

GotRegulars provides restaurants and bars ("venues") with a digital menu, booking, reviews, loyalty and content platform. This policy explains what we collect, why, and your rights. Two parties may be data controllers: GotRegulars (the platform) and the venue whose menu you are using.

What we collect

• Guest profile — a device identifier, and (only if you provide it) your name, phone, email, and age confirmation for age-restricted events.
• Activity — dishes you like ("pops"), reviews and comments you submit, questions you ask the assistant, bookings you make, and loyalty points you earn.
• Content you submit — photos/videos ("Guest Moments") you choose to upload.
• Technical — basic device/browser info needed to run the menu.

Why we use it (lawful bases)

• To provide the service you asked for — showing the menu, taking a booking, awarding loyalty points (performance of a contract / legitimate interests).
• Marketing messages (email/SMS from the venue) — only with your separate, explicit opt-in; you can withdraw at any time.
• AI assistant — your questions are sent to our AI provider (OpenRouter/OpenAI) to generate an answer. It always identifies itself as an AI. Do not share sensitive personal data with it.

Reviews & guest content

Reviews you submit are first-party reviews shown on the venue's menu. Genuine reviews are published — a venue may only remove reviews that are spam, abusive, fake or unlawful, with a logged reason. Venues cannot hide a review simply for being negative. If you upload a Guest Moment, you grant the venue and GotRegulars a licence to display it on the menu, and — only if you separately opt in — to re-share it on the venue's social channels. You must own the content and have the consent of anyone identifiable in it. You can ask for your content or review to be removed at any time.

Who we share with

Service providers who help run the platform: Supabase (database/hosting), our AI provider, and — where the venue enables them — payments (Stripe), messaging (Twilio), email (Resend) and reviews platforms. We do not sell your data.

Your rights

Under UK GDPR / EU GDPR (and similar laws such as CCPA) you can access, correct, delete or export your data, object to processing, and withdraw consent. Email [privacy@yourvenue.com] or [privacy@gotregulars.com] and we will action it. Children under 16 should not submit content without a parent/guardian; age-restricted events require an 18+ confirmation.

Retention & security

We keep data only as long as needed to provide the service and meet legal obligations, then delete or anonymise it. Data is protected with row-level security and encryption in transit and at rest.

Contact

GotRegulars: [privacy@gotregulars.com]. Your venue is a joint controller for their menu — their contact is shown on their page.