Privacy policy

Data controller: Through the Kitchen Ltd (Serenos), a company registered in England and Wales with number 17564347, 20 Wenlock Road, London N1 7GU, United Kingdom.

For any question about your data, write to hola@serenos.es or send us a WhatsApp message.

When you buy: your phone number, your email address and the name on your payment.

When you send us a WhatsApp message: your number, your profile name and the messages.

What you tell us you like: restaurants, nights and party size.

The record of your purchases: what you bought, when, refunds, and if you went.

We do not buy data about you from other companies.

To give you the table you bought: we send the reservation, reminders, changes and refunds. Basis: the contract.

To answer your messages. Basis: the contract and our legitimate interest.

To send you new tables on WhatsApp, only if you give consent. You can stop at any time: write STOP. Basis: your consent.

To prevent fraud, resale and misuse of the service. We use only the data you gave us and your record with us. Basis: our legitimate interest.

To keep accounting records. Basis: a legal obligation.

We use these providers. They process the data only on our instructions:

Stripe (payments). Stripe receives your card details direct, and keeps them so that we can charge a restaurant's no-show fee. We never see or keep your card number.

Meta Platforms, WhatsApp (messages).

Telnyx (text messages, when WhatsApp is not available).

Vercel (website hosting) and Supabase (database).

Anthropic (an AI assistant that helps us answer your messages).

We do not give your data to the restaurant.

We are a UK company. The EU recognises that the UK protects data adequately.

Some providers process data in the United States. These transfers use the EU-US Data Privacy Framework (and its UK extension) or the Standard Contractual Clauses.

Purchases and payments: as long as the law requires for accounting (6 years).

Messages and preferences: until you ask us to delete them, or 24 months after your last contact.

Consent to offers: until you withdraw it.

You can ask for access, correction, deletion, restriction, objection and portability of your data. You can withdraw your consent at any time.

To do this, write to hola@serenos.es or send us a WhatsApp message. To delete your data, see the data deletion page. We answer in one month or less.

You can also make a complaint to the Spanish Data Protection Agency (www.aepd.es) or to the UK Information Commissioner's Office (ico.org.uk).

The public pages use no cookies. The admin area uses one necessary session cookie.

Stripe's payment page has its own cookie policy.

The service is only for people aged 18 or more.

Last updated: 2026-11-05. If we change this policy, the new version shows here with its date.