Privacy / Data Protection
How platform information is handled
Policy working draft: 13 August 2026. This page describes the implemented data flows and avoids promises of absolute security.
Who operates the platform
TT Restaurant Hub supports Trinidad and Tobago Restaurant Week (TTRW). TTRW controls the authorised platform content and operational data it supplies. The formal legal entity and data-controller contact must be confirmed before launch.
Information collected
The platform may collect restaurant business and contact details, public review content, private website feedback, loyalty contact information and consent records, and limited security/audit information needed to operate and protect the service.
Why and how it is used
Information is used to review Restaurant Week participation, publish approved restaurant information, provide membership identification, moderate reviews, respond to consented feedback, operate voting, maintain security and administer the platform.
Restaurant information
Authorised staff review submissions before publication. Public restaurant details, menus and verified direct-reservation links may be viewed, linked to and shared by visitors. Private registration contacts are excluded from public APIs.
Loyalty membership
Membership data creates and manages an identification record. Marketing consent is optional and separate. QR codes contain only a random verification URL; they contain no name, email address or telephone number.
Reviews and feedback
Reviews enter moderation and only approved content is public. Pending, rejected, hidden and flagged reviews do not affect public averages. Feedback remains private and an optional email is retained only when contact consent is given.
Access and sharing
Access to non-public information is restricted by role. Approved service providers may process hosting, database, object-storage or transactional-email data under the organisation's arrangements. The current deployment uses Cloudflare services; other providers must be documented when configured.
Retention
Records are kept only while needed for their stated operational, consent, security or legal purpose, then archived or deleted under a client-approved schedule. Exact retention periods and backup deletion procedures require formal approval.
Rights and contact
People may request access, correction, consent withdrawal or deletion through the Contact page. Some records may need to be retained where the organisation has a lawful operational or legal reason.
Security and public data
Access controls, validation, audit logs and restricted exports reduce risk, but no service can promise absolute protection. Information deliberately published in restaurant profiles may be copied or shared by visitors.
Cookies and analytics
Essential secure session cookies protect administration. Any analytics, advertising or non-essential cookies must be documented and, where required, enabled only with appropriate consent.
Legal review recommended
Formal review by qualified Trinidad and Tobago legal/privacy counsel is recommended before public launch. The client should confirm the operating legal entity, data-controller contact, lawful bases, retention periods, processor terms and final membership conditions.
Contact TT Restaurant Hub