1. Who is responsible for your data
UPSALT SAS, registered in France under SIREN 994 024 362 and headquartered at 50 boulevard Stalingrad, 06300 Nice, France, is responsible for personal data collected through this website and for its own business activities. Contact us at info@upsalt.io.
When a venue uses UpSalt to manage bookings, that venue is normally the data controller and UpSalt processes guest data on its instructions. Guests should contact the venue first about a specific reservation.
2. Data we collect
- Identity and contact details, such as name, email address and telephone number.
- Reservation details, party size, date, time, seating or zone preferences and guest notes.
- Dietary, accessibility or special-request information that you choose to provide.
- Payment status, deposit or minimum-spend information. Card details are handled by the relevant payment provider and are not intended to be stored by UpSalt.
- Account, support, device, log and usage data needed to operate and secure the service.
- Cookie and analytics information where you have consented or where a cookie is strictly necessary.
3. Why we use it
We process data to provide and secure the service, manage accounts and bookings, send requested transactional messages, provide support, comply with law and improve UpSalt. Depending on the context, the legal basis is performance of a contract, legitimate interests, legal obligation or consent. Marketing messages are sent only where permitted and can be unsubscribed from.
4. Who receives data
Access is limited to authorised UpSalt personnel, the venue handling the booking, and service providers necessary for hosting, messaging, analytics, support or payments. Providers act under appropriate contractual and confidentiality obligations. We do not sell personal data.
5. International transfers and retention
If a provider processes data outside the European Economic Area, UpSalt uses an appropriate transfer mechanism such as an adequacy decision or Standard Contractual Clauses. Data is retained only for as long as needed for the stated purpose, contractual obligations, security and legal record-keeping. Venue-configured retention periods may also apply to guest records.
6. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time. Email info@upsalt.io. You may also complain to the CNIL or your local supervisory authority.
7. Security and changes
We use appropriate organisational and technical safeguards designed to protect personal data. No online service can guarantee absolute security. We may update this policy as the product, providers or law change; the date above shows the latest revision.