How we handle your details.

01Who is responsible

Osteria dal Nonno, C-Front, Qatif, Saudi Arabia, is the data controller for the information described here. We decide what is collected and why.

02What we collect

We collect only what a reservation needs:

• Your name — so we can greet you and find your table.
• Your phone number and dialling country — the only way we can reach you about your booking.
• Your email address — to send the confirmation.
• The date, time and number of guests, and any note you choose to write (allergies, an occasion, a seating preference).
• A one-way encrypted fingerprint of your internet address — used only to stop one device from taking every table. Your actual address is never stored.

03Why we collect it

To arrange and hold your table, to contact you if anything about your booking changes, and to protect the booking system from automated abuse. Nothing more.

We do not use your details for advertising, we do not build profiles, and we do not sell or rent them to anyone.

04Guest history

When you book again with the same number, we link it to your earlier visits so our team knows you are a returning guest and remembers your preferences. Staff may add service notes — for example a nut allergy, or that you prefer a quiet table.

This history exists to serve you better. You may ask us to delete it at any time.

05Who can see it

Only the restaurant's own staff, each signed in to a named account with their own permissions. Every view and every change is recorded with the name of the staff member who made it.

We share nothing with third parties for their own purposes. Our technical suppliers — the hosting company and the database provider — process the data strictly on our instructions.

06Where it is stored

Our website and database run on servers located outside the Kingdom of Saudi Arabia. Data travels encrypted (HTTPS/TLS) in both directions and is protected by access controls, row-level permissions and two-factor authentication for staff accounts.

By sending a reservation you consent to this transfer. If you would rather not, call the restaurant and we will take your booking by phone instead.

07How long we keep it

Reservations and guest records are kept while you remain a guest of the restaurant, and are deleted on request.

Technical access logs, which contain the encrypted address fingerprint and the email of the staff member signed in, are rotated automatically and retained for a short period only.

08Cookies

The public site stores one preference in your browser: the language you chose. It carries no advertising or tracking cookies, and no third-party analytics.

The staff panel uses a session cookie so employees stay signed in. It is never set for ordinary visitors.

09Your rights

Under the Personal Data Protection Law you have the right to:

• Be informed of the legal basis and purpose for collecting your data.
• Access your data and request a copy of it.
• Have inaccurate or incomplete data corrected.
• Request that your data be destroyed when it is no longer needed.
• Withdraw your consent at any time, without affecting anything already done.

10Children

Our booking form is intended for adults. We do not knowingly collect data from children. A reservation made for a family naturally includes children as a number of guests only, never as named individuals.

11Changes to this notice

If we change how we handle your data, we will update this page and the date above. Material changes will be highlighted on the reservation page.