Privacy Policy

Ozzo is an online table booking service for restaurants, cafés and lounge bars. In this policy, “we” means the Ozzo team, a “venue” is a restaurant or other business that accepts bookings through Ozzo, and a “guest” is a person who makes a booking.

We process the data of CRM users (venue owners, managers and staff) as the operator. We process guest data on behalf of the venue where the booking is made: the venue decides how to handle the booking, and we store and deliver it.

Guest data:

• name and phone number;
• date, time, party size, chosen area or table and booking wishes;
• page language, booking status and its change history;
• Telegram chat ID, if the guest turned on booking notifications in the bot.

CRM user data:

• name, email address, Telegram ID and username;
• password, stored only as an irreversible hash;
• organization, venues, role and the CRM activity log.

Technical data: session cookies, anonymous visit statistics for booking pages (a random visit ID and a source tag such as Instagram or maps), and the IP address and browser details in server logs and error reports.

• to place a booking, pass it to the venue and tell the guest whether it was confirmed, declined or cancelled;
• so the venue can contact the guest about the booking;
• to provide venues with the CRM, staff accounts and Telegram notifications;
• to show venues statistics on bookings and guest sources;
• to keep the service secure, prevent abuse and fix errors;
• to comply with the law.

We do not sell personal data, show ads, or use guest data for Ozzo's own marketing.

Guests give consent to processing when they submit the booking form. CRM user data is processed to perform the agreement on using the service. In some cases we process data to meet legal requirements.

• The venue where the booking is made: its staff see the booking in the CRM.
• Telegram: notifications about new bookings, including the guest's name and phone, are sent to the staff chats the venue has connected, and to the guest's own chat if they turned notifications on. Telegram processes these messages under its own rules.
• Infrastructure providers that help us run the service: hosting and error tracking. They only receive what they need for their work.
• Public authorities, only upon a lawful request.

No other third parties receive the data.

Bookings are kept while the venue has an Ozzo account, for visit history and statistics. Accounts are kept until they are deleted. Backups are kept for a limited time and then overwritten. Server logs are kept as long as needed for security and troubleshooting.

On request we delete or anonymize data earlier, unless the law requires us to keep it longer.

• all connections to the site use HTTPS;
• passwords, sign-in links and tokens are stored only as hashes;
• the session is kept in a secure cookie that page scripts cannot read;
• venue staff only see the venues they have access to, and their actions are logged;
• only the Ozzo team has access to the servers.

We only use necessary cookies: for signing in to the CRM and for the chosen language. Browser storage keeps convenience settings such as the selected venue, the new-booking sound or dismissed hints. The site has no advertising or third-party tracking cookies.

You can:

• find out what data we process about you and get a copy;
• ask us to correct inaccurate data;
• ask us to delete your data or restrict its processing;
• withdraw your consent.

Guests can cancel a booking on the booking page while the venue allows it. For questions about booking data, contact the venue or us. We will respond as soon as possible.

The service is not intended for children. Bookings for families with children are made by an adult.

We may update this policy. The new version is published on this page with its effective date. We notify venue owners in advance about significant changes.

Send questions about personal data and deletion requests to us: t.me/ozzo_uz_bot.