What we do with your details
Short version: we take the few things we need to hold your table, we keep them for a year, and we do not sell them or send you marketing.
What we collect
When you book a table we ask for your name, your email address, your phone number, the size of your party, and any notes you want to add such as an allergy or a birthday. We do not ask for a postal address, a date of birth, or a payment card.
We need all three of the name, the email and the phone number to hold the table, so if you would rather not give them we cannot take the booking online. Call us instead and we will take it over the phone.
Alongside the booking we record the internet address your device was using at the time. It is there to stop automated abuse, such as someone filling the restaurant with bookings that are not real. Nobody here looks at it in the normal course of running the service, and it is deleted with the rest of the booking.
The booking form is checked by Cloudflare Turnstile, which tells people apart from scripts without setting tracking cookies and without asking you to identify pictures. It sees your internet address and some technical details about your browser. Cloudflare already serves this website, so this is not a new company receiving your data.
Why we can hold it
We use these details to hold and manage your reservation, which is the contract between us. Because of that we do not ask you to tick a consent box to make a booking. If we ever want to send you anything else, such as news or offers, we will ask separately and you will be free to say no.
Knowing which ads and links bring guests is not part of that contract. We do it because a small restaurant needs to know whether its advertising is working, which the law calls a legitimate interest. It is a short note that lasts one visit, there is no profile of you behind it, and you can tell us to stop.
How long we keep it
Booking records, including the note about where you found us, are deleted or anonymised after twelve months. This happens automatically on a schedule, not when someone remembers to do it.
Where it is stored, and who sees it
Reservations are stored in a database hosted in Singapore. Our staff see only what they need to run the service that evening. We do not share your details with anyone else, other than the technical providers who host the site and send our confirmation emails on our behalf.
Cookies, and how we know where you found us
This site does not use tracking cookies and does not run advertising trackers. We do not follow you around the internet, so there is nothing here for you to dismiss a cookie banner about.
We do count visits, in the plainest way there is. Once per visit, we add one to a daily total for whichever link or search brought you here. The count holds the date, the link and a number, and nothing about you: no name, no internet address, no device details, no identifier of any kind, and nothing that could be traced back to you or joined up with anything else. It is a tally on a wall, not a record of a person, which is why we keep these counts rather than deleting them.
There is one thing we do measure about your visit itself. When you arrive from one of our ads, from a link we have tagged, or from a search, your browser holds on to the tags from that link for the length of your visit, along with a note that this visit has already been counted so we do not count it twice. They sit on your device and nowhere else. If you book a table, the tags are kept with the booking, so we can see which ads and which links actually bring guests to the restaurant. If you do not book, they are gone when your visit ends.
With a booking we also note the country your device was connecting from and the language your browser asks for, which is how we decide where to advertise and in which language. Both are rough, neither says who you are, and the country is where you were sitting when you booked rather than where you are from.
Your rights
Under Thailand's Personal Data Protection Act you can ask us what we hold about you, ask us to correct it, ask us to delete it, object to our using the tags from a link to work out which ads bring guests, and complain to the Personal Data Protection Committee if you think we have got it wrong. Email or call and we will do it. If something ever went wrong in a way that put your details at risk, we would report it to the Personal Data Protection Committee within seventy two hours.
Contact
Call 082 226 9965, emailthenuovagroup@gmail.com, or speak to us at the restaurant: 37 Siri Phong Rd, Samran Rat, Phra Nakhon, Bangkok 10200.