Privacy Policy

Last updated: March 2026 · Version 1.1

The Curated Table ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and protect information you provide when using our services or visiting thecuratedtable.io.

Who we are and data controller details

The Curated Table is a business dining curation service operated by Rachael, based in Dublin, Ireland. For the purposes of GDPR, The Curated Table is the data controller responsible for your personal data.

Contact: rachael@thecuratedtable.io

As a small business, we are not required to appoint a Data Protection Officer (DPO). For any data-related queries please contact us directly at the email above.

What data we collect

When you submit a dining request through our website, we collect:

• Your name and email address
• Phone number (if provided)
• Dining preferences: city, date, party size, occasion, budget, dietary requirements
• Any additional information you include in your request

When you book a call via Calendly, Calendly collects your name, email, and calendar availability. Their privacy policy applies to that data.

How we use your data

We process your personal data on the following legal bases under GDPR Article 6:

• Performance of a contract (Art. 6(1)(b)): To respond to your dining request with curated restaurant recommendations and follow up if needed.
• Legitimate interests (Art. 6(1)(f)): To improve our service, develop restaurant performance benchmarks, and build proprietary insights from anonymised and aggregated data. This data cannot be used to identify you personally. We have assessed that this processing does not override your fundamental rights and freedoms.
• Consent (Art. 6(1)(a)): Where you have explicitly agreed, anonymised usage data (such as booking patterns and satisfaction indicators — never your name or contact details) may be shared with the conference organiser who facilitated your request, for example in a post-event engagement report. You may withdraw this consent at any time by contacting us.

We do not sell or rent your personal data to third parties. We do not use your personal data for direct marketing without your explicit consent.

Aggregated and anonymised data

We may derive anonymised, non-personal insights from the data we collect — for example, aggregate patterns in dining preferences, restaurant performance across events, or geographic demand trends. This data is stripped of all identifying information before use and cannot be linked back to you. We use this to improve our recommendations and develop our service. This anonymised data may form part of the proprietary value of our business and may be used or transferred in the event of a business sale or acquisition, in which case it would remain anonymised.

Data storage and processors

Your form submissions are processed by Formspree (formspree.io), which stores submissions on servers located in the United States. Formspree is compliant with GDPR through Standard Contractual Clauses. You can review their privacy policy at formspree.io/legal/privacy-policy.

We retain your personal data for up to 12 months from the date of your request, after which it is deleted or anonymised. Anonymised aggregate data derived from your submission may be retained indefinitely as it can no longer identify you. You may request earlier deletion at any time (see Your Rights below).

Fonts and third-party resources

This website loads fonts from Bunny.net (bunny.net), a European font delivery service. Unlike Google Fonts, Bunny.net does not collect or process visitor IP addresses or personal data. No cookies are set by this service.

Cookies

This website does not use cookies, tracking pixels, or analytics scripts. We do not track your behaviour on this site.

Your rights under GDPR

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at rachael@thecuratedtable.io. We will respond within 30 days.

Data transfers outside the EEA

Form submission data is processed by Formspree in the United States. This transfer is lawful under GDPR Article 46 and is covered by Standard Contractual Clauses (SCCs) as provided by Formspree. You can request a copy of the relevant safeguards by contacting us.

If you book a call via Calendly, your data is processed in the United States under Calendly's own privacy policy and SCCs. No other personal data is transferred outside the EEA.

Right to lodge a complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. In Ireland, this is the Data Protection Commission (dataprotection.ie). In other EEA countries, contact your national data protection authority.

Children's privacy

Our service is intended for business professionals. We do not knowingly collect data from anyone under the age of 18.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. Continued use of our service after changes constitutes acceptance of the updated policy.