Guests and staff leave a trail of personal data.
Bookings, offers, cameras and rotas all collect details about people. Guests, staff and regulators expect you to tell them what you do and to keep it safe. Clear notices and sensible retention cover most of what they ask.
Guests share more than a name
Allergies and dietary requests can reveal health or religious beliefs, which need extra care. The pack shows how to take and use them safely.
Loyalty means profiling
Points, offers and visit history build a picture of each guest. The pack covers notices, consent and what to do when a member leaves the scheme.
Cameras watch staff too
CCTV records guests and employees alike. The pack covers signs, access, retention and what to tell your team.
Four parts. One tidy approach to guest and staff data.
Each part stands on its own and also points to the next: the booking notice feeds your loyalty wording, and the consent rules govern every message you send.
Reservation & guest data
Take bookings without over-collecting.
- Booking form and phone-booking wording
- Handling allergy and dietary information
- Table-booking tools and what they see
Loyalty programs
Rewards with the right notices.
- Sign-up wording and a privacy notice for members
- Consent for offers and personalised marketing
- Leaving the scheme and deleting a member's data
CCTV & staff data If used
Cameras, rosters and timekeeping.
- Signage, purposes and who may view footage
- Retention periods for recordings and how to delete them
- What to tell staff about cameras, rosters and timekeeping records
Marketing consent
Offers and newsletters within the rules.
- Opt-in wording for newsletters, offers and texts
- Keeping booking confirmations separate from promotions
- Unsubscribe routine and consent records
Real wording, not a table of contents.
Two short excerpts from the pack. Highlighted fields are the parts you fill in for your own venue.
Dietary and allergy information
If you tell us about an allergy or dietary requirement when you book, we use that information only to prepare your meal safely and to look after you during your visit. Because it can reveal information about your health or beliefs, we limit who can see it and delete it with your booking after [retention period].
Questions can be sent to [contact email].
The full pack adds the basis for using this information and wording for phone bookings.
Before you rely on cameras
- Have you written down why you use cameras, for example security or theft prevention?
- Are clear signs displayed at entrances and in monitored areas?
- Do cameras avoid areas where guests and staff expect privacy, such as toilets and changing rooms?
- Do you know who can view footage and how long it is kept?
- Have your staff been told about the cameras?
The full checklist covers access requests and deletion.
These are shortened starting points. Your own notices and records must reflect what you actually do, and national rules vary. The pack shows you where to check.
Who it's for, and who it isn't.
A good fit if you
- Run a restaurant, café, bar or small hospitality venue
- Take reservations, run a loyalty scheme or send offers
- Use CCTV or a rostering tool
- Have no in-house privacy counsel
Not enough on its own if you
- Run a hotel group with centralised guest databases and data teams
- Use facial recognition, biometric timekeeping or wide guest tracking
- Operate your own delivery or online shop (see the E-commerce Compliance Pack)
- Need a signed, lawyer-reviewed contract; the pack is not legal advice
Four parts. One payment.
Everything on this page, delivered together. Adapt it to your business, update your notices and answer the next question from the same documents.
- Reservation & guest data
- Loyalty programs
- CCTV & staff data
- Marketing consent
Before you ask —
Who is the Restaurant & Hospitality Compliance Pack for?
Restaurants, cafés, bars and other hospitality venues in the EU that take reservations, run loyalty programmes, use CCTV and employ staff, and want a clear, documented way to handle that data.
What do I receive?
Four parts: reservation and guest data wording, loyalty programme notices, CCTV and staff data guidance and marketing consent wording. You get your download page straight after checkout, with no account to create.
Do I need consent for allergy information?
Allergy and dietary details can reveal health or beliefs, so extra care applies. In many cases you can use them to serve the guest safely at their request, but the right basis and any consent rules vary by country. The pack explains how to word the notice and how to limit and delete the information.
How long can I keep CCTV footage?
No longer than needed for your stated purpose, which is often a few days, and national guidance differs. The pack gives a framework for choosing a period and leaves the national figure for you to confirm.
Can I send offers to guests who booked a table?
Not automatically. Consent is the usual basis for marketing emails and texts, and some countries allow limited messages to existing customers about similar services. The pack gives opt-in wording and explains how to check your national rule.
Is this legal advice?
No. The pack is a practical starting point. The wording and records are drafts you adapt to how you really work, and national rules vary. Have a qualified lawyer review anything you rely on.
What if it isn't what I expected?
Email hello@gdprgard.eu within 14 days for a full refund. No form to fill in.
Welcome guests with a clear privacy story.
Get the booking notices, loyalty wording, CCTV guidance and consent rules in one pack.
Get the Pack — €39