Hendra One privacy

Privacy policy

This website

Hendra One is the trading name of Hendra Group Limited, registered in England & Wales. This site is an information site: it sets no marketing or analytics cookies and collects no personal data while you browse.

If you ask for a demo

When you ask for a demo, by the form on this site or by email, we use what you send us (your name, work email, business, how many sites you run, your role and a phone number and, if you give them, a good time to ring and any message) to arrange the demo and to reply to you. We use the phone number to ring to see how the demo is going and to answer your questions, and for nothing else. The form also notes the page you were on, the page your visit started on, the button you pressed, how many pages you looked at, the name of the website that sent you and any campaign tags in the address, so we know what brought you. Your browser holds these only while the tab is open and sends them with the form; nothing is stored on your device for it. We keep these details for 12 months after we were last in touch and then delete them, unless you become a customer.

If you ask us for something smaller, such as the price by email, the SFBB starter pack or a call from Nick, we use your email address or phone number to send it or to ring you, keep it with any demo request you make later, and send nothing more unless you ask. The same 12 months apply.

If you tick "Email me tips while I try it", we may send you a few emails while your demo is running. Each one has a link that stops them straight away. Without the tick, we only write about the demo you asked for.

When you start filling in the form, the page asks Google reCAPTCHA to check that you are a person rather than a bot, so Google's privacy policy applies to that check. Our emails go out through Resend, Inc., our email provider, in the United States.

Demo terms

The demo is a working copy of Hendra One filled with an invented pub company, shared by everybody who is trying it. By asking for one you agree that:

  • your demo login is for you alone, lasts 14 days unless we agree to extend it, and can be ended by us at any time;
  • you will not enter real guests', staff or customers' details: everything in the demo is invented, and what you add is cleared every night;
  • we see which parts of the demo you open and for how long, so that our follow-up is useful to you; we do not record what you type;
  • the demo is for deciding whether Hendra One suits your business, and it comes as it is, with no promise that it is complete or always available.

If you're a guest of a venue that runs on Hendra One

Each venue is the data controller for its guests; Hendra One processes bookings on the venue's behalf under a Data Processing & Service Level Agreement. Every booking page links its venue's privacy policy. Where a venue hasn't published its own, the standard policy below applies, it is the same text shown on their booking pages.

If you work for one of our client venues

Your employer is the controller of your staff account, rota, holiday and compliance records; Hendra One processes them on your employer's instructions. Ask your Head Office for their staff privacy notice.

The Hendra Clock app

Hendra Clock is the clock-in app a venue keeps on an iPad or iPhone. When you clock in or out it sends the number you type (your employee number or your TouchOffice ID) and the time to your employer's Hendra One account, where it becomes your timesheet. It collects nothing else: no photo, location or contacts. It does not track you and shows no adverts. Your employer is the controller of these records, as above.

Cookies and similar technologies

We use no advertising or analytics cookies and nothing that follows you across other sites, which is why you won't see a cookie banner. What we do keep on your device is strictly necessary for something you have asked for:

  • Browsing this site: nothing is stored on your device. Our own server counts each page view by page and day, with nothing that identifies you, so we know which pages people read.
  • The demo form: Google reCAPTCHA's check that you are a person, which may set a cookie governed by Google's privacy policy. Once you send the form, your browser also keeps the email address you entered, so the link we email you can sign you straight in. Clearing this site's data in your browser removes it.
  • Signing in to Hendra One (the demo included): the same reCAPTCHA check, keeping you signed in, remembering a device you have trusted for two-step sign-in, signing you out after a spell without use, and layout choices you make, such as full-screen views.
  • Booking pages: see the guest policy below.

If we ever add analytics or anything else that is not strictly necessary, we will update this policy first and ask for your consent wherever the law requires it, before it runs.


The standard guest policy

The venue is the data controller for personal information collected through this booking page. This policy explains what is collected, why, and your rights. It applies unless the venue has published its own policy.

What we collect

  • Booking details: your name, phone number, email address, party size, date and time, and any special requests you add.
  • Waitlist details: name, phone number and (optionally) email, if you join a waitlist.
  • Pre-order details: names and menu choices (and optionally email/phone) for each member of your party, if the venue sends you a pre-order link.
  • Feedback and reviews: a rating and any comments you choose to leave after a visit.
  • Marketing preference: whether you ticked the box to receive news and offers. It is never ticked for you.
  • Card details for no-show protection: only if the venue asks you to secure a booking with a card. Card numbers are entered on and stored by our payment provider (Stripe or Dojo, depending on the venue); they never touch this site's servers. Any cancellation or no-show fee is disclosed before you add a card.

Why we use it

  • To provide your booking (contract): confirmations, reminders, waitlist and pre-order emails about a booking you made.
  • To run the venue well (legitimate interests): visit history, follow-up "how was your visit?" and review-request emails after you dine. Every such email contains an unsubscribe link, and one click stops them all.
  • Marketing (consent): news and offers are sent only if you opted in, and every email has an unsubscribe link. We measure whether marketing emails are delivered and opened so the venue can tell what's working.

Who processes it for us

  • Google Cloud / Firebase: secure hosting and database for the booking system.
  • Resend: delivers our emails and reports delivery, open and click events back to us.
  • Stripe and Dojo: payments, deposits and card storage for no-show protection. Which one applies depends on the venue; both are regulated payment providers.
  • Google reCAPTCHA: protects the booking page from bots and abuse; Google's privacy policy applies.

These providers act only on our instructions. We never sell your data.

Where your data is held

Our booking database and the servers that run it are operated by Google Cloud in the United States, and the email and payment providers above also process data there. That means your details are transferred outside the UK. Those transfers are covered by the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise by the UK International Data Transfer Agreement or Addendum, which are the safeguards UK law recognises for keeping your rights with the data. Card details themselves are held by our payment provider, not by us.

Cookies and similar technologies

This booking page sets no advertising or analytics cookies, and nothing that tracks you across other sites, which is why you won't see a cookie banner. The only storage used is strictly necessary: keeping your booking session working, and Google reCAPTCHA's anti-abuse checks (which may set a cookie governed by Google's privacy policy) to protect the page from bots.

How long we keep it

Only as long as needed. Waitlist entries are removed once the date has passed, and booking records are anonymised after the venue's retention period. Stored cards are removed shortly after your visit.

Your rights

You can ask for a copy of the personal data held about you, ask for it to be corrected, or ask for it to be erased, contact the venue directly and they can action all three. You can stop marketing and follow-up emails at any time with the unsubscribe link in any email. If you're unhappy with how your data has been handled, you can complain to the Information Commissioner's Office (ICO).


Venues: a client-ready Word version of this policy (with placeholders for your company details) is available to download, Guest Privacy Policy template (.docx).

© 2026 Hendra Group Limited, trading as Hendra One. Registered in England and Wales. Privacy