Privacy & Data Protection

Manna Haus Cuisine Bar & Grill, 124 Lower Ford Street, Coventry, United Kingdom, is the data controller for personal data collected through this website.

When you place an order or request a booking we collect your name, phone number, optional email address, the items or details of your request, and any notes you choose to add.

We use this only to prepare, confirm and deliver your order or booking, to contact you about it, and to keep accurate business records. Our lawful basis is performance of a contract and our legitimate interest in running the restaurant.

We do not sell your data, and we do not send marketing messages unless you have separately opted in.

Data is stored in an encrypted, access-controlled database hosted in the EU/UK region. Encryption is applied in transit (TLS) and at rest.

Access is restricted to named restaurant staff accounts protected by individual passwords; row-level security rules block all access from anyone who is not an authorised staff account. Dashboard activity is logged for accountability.

These controls follow the principles of ISO/IEC 27001 — least privilege, access control, encryption, logging and data minimisation. Formal ISO 27001 certification is an organisational audit process and is not claimed here.

Order and booking records are kept for up to 6 years to satisfy UK accounting and tax obligations. Contact details linked to a customer record are erased earlier on request unless we are legally required to keep them.

If you choose to confirm an order over WhatsApp, that message is handled by WhatsApp under its own privacy policy. Payment, where taken in person, is handled by our card provider — we never store card numbers.

You have the right to access, correct, erase, restrict or object to processing of your personal data, and to data portability. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

To exercise any right, contact us and we will respond within one calendar month.

This website does not use advertising or tracking cookies. Only strictly necessary storage required to run the site and keep staff signed in is used.