Privacy Policy
1. Who we are
Anchor ("Anchor", "we", "us", "our") is a reservation and guest-management platform operated by [LEGAL ENTITY NAME — e.g. company name] , [trade licence no.], [registered address, Emirate, UAE]. If you have any questions about this policy or your personal data, contact us at privacy@anchorbookings.com.
2. Whose data this covers
This policy covers two groups:
A. Venue account holders — the businesses (restaurants, cafés, salons, clinics, spas and similar) that sign up to use Anchor.
B. Guests — the customers of those venues, whose booking details a venue enters into Anchor. If you are a guest and received a message from a venue via Anchor, the venue is the party that holds the direct relationship with you; Anchor processes your data on that venue's behalf. To exercise your rights over your data, contact the venue directly, or contact us at privacy@anchorbookings.com and we will assist and direct your request to the relevant venue.
3. What personal data we collect
Depending on whether you are a venue or a guest, we may collect and store:
- Names
- Phone numbers
- Email addresses
- Booking and reservation history
- Dates of birth / birthdays (where a venue records them)
- Notes recorded by the venue about a guest (e.g. seating preferences, dietary notes)
- Spend and visit information (including data imported from a venue's point-of-sale system)
- For venue account holders: login credentials and basic account/business details
We do not intentionally collect special-category sensitive data (such as health, religion or biometric data). Venues are instructed not to enter such data into free-text notes.
4. Why we collect it (purpose)
We process this data only to:
- Provide the booking and guest-management service to venues
- Send booking confirmations, reminders, and password-reset emails on a venue's behalf
- Allow venues to manage their reservations, guest profiles and analytics
- Maintain the security, backups and proper functioning of the service
We do not sell personal data. We do not use guest data for our own marketing.
5. Legal basis (UAE PDPL)
We process personal data on the basis of: the consent of the individual where required; the performance of our contract with venue account holders; and our legitimate interest in operating and securing the service, in a manner consistent with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
6. How we protect it
- Data is transmitted over encrypted connections (HTTPS).
- Data is stored on a secured server and separated per business, so one venue can never access another venue's data.
- Access credentials and secret keys are restricted and not shared.
- Regular backups are taken to prevent data loss.
No system is perfectly secure, but we take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
7. Who we share it with
We share personal data only with:
- Service providers that help us run Anchor, specifically our email-delivery provider (Resend) and our hosting provider (DigitalOcean), who process data on our behalf under their own security obligations.
- Legal authorities, only where we are legally required to do so.
We do not otherwise disclose personal data to third parties.
8. Where data is stored / international transfer
Our server is located in Frankfurt, Germany, and some service providers may process data outside the UAE. Where personal data is transferred outside the UAE, we take steps consistent with the UAE PDPL to ensure it remains protected.
9. How long we keep it
We keep personal data for as long as a venue maintains its Anchor account and needs it to provide its service to guests. Deleted records are held in a recoverable "trash" state for a limited period before permanent deletion. If a venue closes its account, we delete or return its data within a reasonable period, except where we must retain it to meet a legal obligation.
10. Your rights
Under the UAE PDPL, individuals have the right to: access their personal data; request correction of inaccurate data; request deletion; object to or restrict certain processing; and withdraw consent. To exercise these rights, contact privacy@anchorbookings.com (guests may also contact the venue directly). We will respond within the period required by law.
11. Children
Anchor is not intended for direct use by children. Venues may record a guest's date of birth, but Anchor is a business tool used by venues, not a service marketed to or used by minors directly.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it was last changed. Material changes will be communicated to venue account holders.
13. Contact
Questions or complaints: privacy@anchorbookings.com. You also have the right to lodge a complaint with the UAE Data Office.