Privacy Policy

The data controller is Roksea — the restaurant whose contact details are shown on the Contacts page of this site. Part of the technical infrastructure (hosting, development, support) is operated by our technical partner Fluorite, acting on our instructions.

• When you make a reservation: name, phone number or another contact method (Telegram/WhatsApp), party size, date and time, and any notes you enter yourself (e.g. allergies).
• When you chat with our Telegram assistant: the text of your messages, your Telegram ID and username.
• When you visit the website: an anonymous identifier generated locally in your browser (not a cookie — see our Cookie Policy), the page you visited, referrer, and UTM parameters if you arrived from a marketing campaign.

We do not ask for or knowingly collect health, ethnicity, religion, or other special-category data. If you share such information voluntarily (e.g. a food allergy in a reservation note), we use it only for the purpose you shared it — keeping your meal safe.

• To process and confirm your reservation — performance of a contract with you.
• To answer your questions via the chat assistant — legitimate interest (customer support) and your consent, of which you receive a short notice on first contact with the bot.
• For anonymous website traffic analytics — legitimate interest in understanding which pages are useful; the identifier is not linked to your real identity.

We use a small number of external providers to run the website and chat assistant: Telegram (for bot messages), Google (AI-generated replies and displaying public Google reviews), and OpenRouter/Anthropic Claude (an internal assistant for staff that does not process your data as a guest directly). The full list, with the purpose of each integration, is documented in our technical repository (subprocessor registry) and available on request.

We do not sell personal data to third parties and do not use it for third-party advertising.

Chat assistant messages and anonymous website analytics are kept for up to 180 days, then deleted automatically. Reservations are kept as part of our operational records; on request, we can anonymize the personal data within them (name, phone, notes) without affecting the venue's statistics.

You have the right to access your data, correct inaccurate data, request deletion/anonymization, restrict processing, and data portability. To exercise these rights, contact us using the details below — we will respond within a reasonable time.

If you messaged our Telegram chat assistant, your consent for that processing is voluntary and not a condition for booking — you can reserve by phone without ever messaging the bot.

This website does not use tracking cookies. See our Cookie Policy for details.

Data is stored on a secured server with access limited to authorized staff, encrypted backups, and an audit trail of staff actions.

We may update this policy when the way we process data changes. The last-updated date is shown at the top of this page.

For questions about your data, contact us using the details below.