Privacy policy

Who is responsible?

Dalu is the trading name shown on this website. Contact us at [email protected] for privacy requests. VAT / enterprise number: BE1018376076. Restaurant address: Leopoldplein 20, 8420 De Haan, Belgium. The legal operator and registered office is Dalu bv located at Leopoldplein 20, 8420 De Haan.

What we collect and why

For bookings we process contact details, reservation time, party size, relevant requests and booking history to provide the reservation service, manage your visit and handle customer inquiries.

For takeaway and gift cards we process order details, billing/contact information, purchase amounts, delivery details and payment status. Payment providers process card information on their own secure services; we do not need full payment-card numbers.

If you contact us by phone or email, we may keep your message or call information to respond and manage the service. We use strictly necessary technical logs for security and fraud prevention.

With the relevant optional consent, we use Google measurement and advertising technology to understand campaign effectiveness. ReserveEase may also receive campaign parameters for bookings and orders where that consent was granted.

Legal bases and sharing

Reservation and order processing is generally necessary to deliver the service you request. Some records must be retained for legal/accounting obligations. Legitimate interests may apply to limited security and customer service operations. Optional analytics and advertising tracking require your consent where applicable.

We use service providers, including Cloudflare for website security and traffic protection, ReserveEase for reservations and online orders, Stripe for gift-card checkout, and Google for permitted measurement/advertising. Those providers may process data under their own terms and privacy notices. International transfers, where relevant, must be covered by suitable safeguards.

Retention and your rights

We keep transaction and reservation information only for as long as needed for services, legal obligations and legitimate dispute handling. Consented website ad-attribution identifiers are configured for a maximum of 90 days in local storage; the original referring domain without advertising consent is kept only for the browser tab/session.

Subject to applicable exceptions, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw optional consent at any time using Cookie preferences. Contact [email protected]. You may also complain to the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

Children and changes

Our booking and purchasing services are intended for ordinary restaurant customers, not as services targeted at children. We may update this policy if the services, providers or processing change; the date above indicates the current draft.