Privacy Policy
Last updated: 16 October 2026
In short
- ServeNest is run by AVA HIGH TECH LTD. For anything about your data, email support@servenest.co.uk.
- Ordered food or booked a table? The restaurant is in charge of your details. We run its system for it. How that works
- We never sell personal data.
- Card details go straight to Stripe. They never reach our servers.
- Analytics cookies are only set if you accept them, and you can change your mind in .
1. Who we are
ServeNest is run by AVA HIGH TECH LTD, a company registered in England and Wales (company number 14928251). Our registered office is 53 The Old Dairy, Hyde, England, SK14 4XP.
For this policy, that makes us the "controller": we decide how the personal data it describes is used, and we follow the UK GDPR and the Data Protection Act 2018.
- support@servenest.co.uk
- Phone
- 07918 200334 (Mon–Fri, 9am–6pm UK time)
2. Who this policy covers
This policy covers:
- visitors to servenest.co.uk;
- people who ask us for a quote or get in touch;
- restaurant owners and their staff who use ServeNest.
Ordering from or booking at a restaurant?
Each restaurant on ServeNest has its own ordering site. When you order, book a table or create an account there, the restaurant decides how your details are used: it is the controller. We are its "processor". We hold your details and run the system on its behalf, follow its instructions, and never use your details for our own purposes or marketing.
To ask about your data, contact the restaurant. Its details and privacy policy are on its ordering site. If you write to us instead, we'll pass your request to the restaurant.
Allergy notes you add to an order are health information. They stay on that order for the restaurant to see, and are never copied to your profile or to a later order.
Restaurants: what we do with your customers' and staff's data is set out in our Terms of Service, under Data protection.
Our own website and admin are for businesses, not for children.
3. What we collect and why
| Who | What we collect | Why, and our legal basis |
|---|---|---|
| Website visitors | IP address, browser and device type, the pages you visit and, only if you accept them, analytics cookies. | To run the site and keep it secure (legitimate interests). To see how the site is used (your consent). |
| People who contact us | Your name, business name and type, email, phone, number of locations, what you're interested in and your message, whether you use our forms, email, phone or WhatsApp. | To reply, send you a quote and arrange a call or demo (legitimate interests, or steps you ask for before a contract). |
| Restaurant owners and staff | Name, email, phone, role and location. Your password, stored hashed so nobody can read it. Your Google or Facebook account name and email if you sign in with them. Sign-in and security records, a record of changes you make (such as menu edits and order updates), and your device's alert address if you turn on alerts. | To give you your account and send alerts (contract). To keep accounts secure and show who changed what (legitimate interests). |
| Restaurants we work with | Business name, addresses, opening hours, company details, your subscription, invoices and payment history, and the Stripe account that takes your card payments. Stripe holds the card details. | To provide and bill the service (contract) and keep tax records (legal obligation). |
| Anyone who asks for help | What you tell us, and our notes on the problem. | To help you (contract) and to improve ServeNest (legitimate interests). |
We don't make decisions about you by automated means that have legal or similarly significant effects.
4. Cookies and analytics
On servenest.co.uk we use the cookies below. Analytics cookies are only set if you accept them. Restaurants' ordering sites and the admin don't use analytics or advertising cookies.
| Cookie | What it's for | How long |
|---|---|---|
servenest_session |
Necessary. Keeps the site working as you move between pages. | 2 hours |
XSRF-TOKEN |
Necessary. Protects our forms from forged requests. | 2 hours |
servenest_ |
Necessary. Remembers your cookie choice. | 180 days |
_GRECAPTCHA |
Necessary. Set by Google reCAPTCHA when you use a form, to tell people from spam bots. | 6 months |
_ga, _ga_* |
Analytics, only with your consent. Google Analytics uses them to count visits and see which pages help. | 2 years |
We don't use marketing cookies at the moment. If we start, they will only be set if you switch them on.
5. Who we share it with
We never sell personal data. These companies handle it for us, only to provide their service, under contracts that require them to protect it:
| Company | What they do for us |
|---|---|
| Contabo | Hosts our servers and databases in a UK data centre. |
| Amazon Web Services | Stores our backups in the EU. They're encrypted before they leave our servers, so Amazon can't read them. |
| Stripe | Takes card payments for restaurants' orders, on each restaurant's own Stripe account, and bills our subscriptions. |
| Hostinger | Sends and receives our email. |
| reCAPTCHA on our forms. Google Analytics, only with your consent. Sign in with Google, only if you use it. | |
| Meta | Facebook sign-in, only if you use it. WhatsApp, if you message us there. |
| Mapbox | Suggests addresses as you type one, such as a restaurant's address or a delivery address. |
| postcodes.io | Finds where a postcode is, for delivery areas. We only send the postcode. |
| Sentry | Reports errors so we can fix them. Set up not to send names, email addresses or IP addresses. |
| Browser push services | Google, Apple and Mozilla deliver alerts to devices that have turned them on. |
We may also share data with our professional advisers, with authorities when the law requires it, or with a buyer if the business is ever sold, who would then have to follow this policy.
6. Data outside the UK
Our servers are in the UK and our backups are in the EU. Stripe, Google, Meta, Mapbox, Sentry and Hostinger may handle some data in the EU or the US. Transfers to the EU rely on UK adequacy regulations. Transfers to the US rely on the UK-US data bridge or the UK's International Data Transfer Agreement or Addendum, so your data keeps the same level of protection.
7. How long we keep it
| Data | How long we keep it |
|---|---|
| Quote requests and contact form messages | 24 months, then deleted automatically. |
| Accounts, restaurant data and the customer data we hold for restaurants | While the account is open, then deleted within 6 months of it closing. |
| Invoices and billing records | 6 years after the end of the financial year they belong to, as HMRC requires. |
| Google Analytics | Up to 14 months. |
| Error reports and server logs | Only as long as we need them to fix problems and keep the service secure. |
8. How we protect it
- Every page and app runs over an encrypted connection (HTTPS).
- Passwords are stored hashed, so nobody, including us, can read them. Changing a password or suspending a staff member signs them out everywhere.
- Card details go straight to Stripe and never reach our servers.
- Each restaurant's data is kept apart from the others', and staff only see what their role allows.
- Backups are encrypted and kept away from our servers.
- We monitor errors and act promptly on security issues.
9. Your rights
You have the right to:
- see the personal data we hold about you and get a copy;
- correct it if it's wrong;
- have it deleted;
- limit how we use it, or object to uses based on our legitimate interests;
- take it with you in a format other systems can read;
- withdraw consent at any time, for example to analytics cookies.
Email support@servenest.co.uk, if you can from the address we have for you. It's free. We may ask you to confirm who you are, and we'll reply within one month. Restaurant owners can also change most details in the admin.
If you ordered from or booked at a restaurant, ask the restaurant (see section 2).
10. Complaints
If you're unhappy with how we've handled your data, please tell us first at support@servenest.co.uk. We'll confirm we've received it within 30 days and do our best to put it right.
You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
When this policy changes, we update the date at the top. If a change matters to how we use your data, we'll email account holders before it takes effect.