Privacy
Data controller: Bloom, Via San Liberale 10, 31100 Treviso, Italy. For any request about your data: +39 0422 277130.
What data
When you book: name, phone, email, party size, day, time and notes. If you create an account: name, email, password (stored encrypted), phone and date of birth if you add them, your bookings and loyalty points. If you opt in to news: your consent and its date.
Why
To handle your bookings (confirm, notify, cancel) and your account with points: this is needed to provide the service you ask for. To send you news and offers only if you ticked the box: you can withdraw at any time from “My details” or by calling us. To protect the site from spam and abuse (Cloudflare Turnstile).
Who processes it
Only providers we need to run the site: Supabase (database, servers in Germany), Vercel (hosting), Resend (confirmation emails), Telegram (booking alerts to our staff), Cloudflare (anti-spam). We never sell or share your data. Some providers may process data outside the European Union under the safeguards required by the GDPR.
How long
Bookings for as long as needed to handle them and to meet legal obligations. Your account until you delete it (you can do it yourself from “My details”). Consent to news until you withdraw it.
Your rights
You can ask to access, correct, delete or receive your data, restrict or object to its processing, and withdraw consent at any time. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).