Privacy
Overview
Residency is operated by Residency Ltd., a company registered in England and Wales. This policy explains what personal data we collect, how we use it, who we share it with, and what rights you have over it.
We collect only what we need. We don't sell your data. We don't use it for advertising. If you want it deleted, email us and we'll handle it within 30 days.
Last updated: May 2026
What we collect
Email address and name
When you subscribe to the newsletter, apply as a chef or restaurant, or complete a booking. This is the primary way we communicate with you.
Booking details
The residency you booked, the date, the number of seats, and any dietary requirements you disclosed. We use this to manage your reservation and communicate it to the relevant chef and host restaurant.
Payment information
We process payments through Stripe. We never see or store your full card number. Stripe retains your payment data under their own privacy policy; we receive only a transaction confirmation and the last four digits of your card for reference.
Dietary requirements
If you disclose an allergy or dietary restriction at checkout, we pass this directly to the chef and host restaurant operating the residency you booked. We do not retain health data beyond what is necessary to manage a live booking.
Server logs and IP addresses
Our hosting infrastructure (Vercel) logs standard request data including IP address, browser type, and pages visited. This data is used for security, debugging, and uptime monitoring. It is not linked to personal identity and is retained for 30 days.
How we use it
Booking management
To confirm your reservation, send reminders, and communicate any changes to the event. This is the core reason we collect personal data and the legal basis is performance of a contract.
Transactional email
Booking confirmations, receipts, and event reminders are sent via Resend. These are not marketing — they are service communications directly related to your booking. You cannot opt out of these while a booking is active.
Newsletter
If you subscribed to our newsletter, we send occasional announcements about new residencies and availability. The legal basis for this is your consent. You can unsubscribe at any time via the link in any newsletter email.
Application processing
Chef and restaurant applications are read by our team and used solely to evaluate your suitability for the platform. We do not share application data with third parties.
Who we share it with
Stripe — payment processing
Stripe processes all card payments. They are a certified PCI-DSS Level 1 provider. Your payment data is held and governed by Stripe's privacy policy.
Resend — transactional email
We use Resend to send booking confirmations and service emails. Your email address and name are passed to Resend for this purpose only. Resend does not use your data for its own marketing.
Supabase — data storage
Our database is hosted on Supabase, which runs on AWS infrastructure in the EU. Booking data, subscriber data, and application data are stored here. Data does not leave the EU.
Host restaurants and guest chefs
We share your name, booking details, and dietary requirements with the restaurant and chef operating the residency you booked. This is necessary to run the event. No other personal data is shared.
No one else
We do not sell, rent, or share your personal data with advertisers, data brokers, analytics platforms, or any other third party not named above.
How long we keep it
Booking records are retained for seven years for accounting and legal compliance, as required under UK and EU law. After seven years, they are deleted.
Newsletter subscriber data is retained until you unsubscribe, at which point your record is deleted within 30 days.
Application data is retained for 12 months and then deleted, unless we have entered into a working relationship with you.
Your rights under GDPR
Under the UK GDPR and EU GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (subject to legal retention requirements); object to processing; and lodge a complaint with a supervisory authority.
In the UK, the supervisory authority is the Information Commissioner's Office (ICO).
Deletion requests
To request deletion of your data, or to ask any question about how we handle it, email us directly.
privacy@tryresidency.comWe will respond within 5 business days and action any valid deletion request within 30 days.
Questions about your data?
We're easy to reach.