Haila SRL ("we") is the controller for the personal data described in this policy. Our registered address is str. Vlaicu Pârcălab 63, Chișinău MD-2012, Republic of Moldova.
Our data protection officer is Alex Smirnov. Contact dpo@haila.md for any data-related question.
What we collect
Account data: phone number, first name, optional email.
Booking data: restaurant, date, party size, occasion, seating preference, special requests.
Activity data: searches you perform, filters you apply, restaurants you favorite.
Restaurants you book at see: your first name and party size at the moment of booking, your phone number only when you arrive (so they can call you if you are running late).
Our SMS provider (Twilio) processes outgoing SMS. They never store the content beyond 24 hours.
Our hosting provider (Google Cloud, eu-central-1) stores the database. They have no access to its contents.
Google Analytics (Google Ireland Limited) receives page views and a random visitor id, and only if you accept analytics cookies. Google may process that data outside Moldova.
Google reCAPTCHA (Google Ireland Limited) checks that requests to our backend come from a real browser. This runs on every visit because it is a security measure, and it is never used for advertising.
We do not sell personal data. We do not share data with advertisers.
Your rights
Access: request a copy of your data at any time from Profile → Privacy.
Rectification: correct your name, phone, or email in Profile → Account.
Deletion: delete your Haila account in Profile → Privacy → Delete account. Your bookings remain associated with the restaurant for tax/legal records but are anonymised on our side.
Portability: data export ships as a ZIP within 24 hours of request.
Objection: opt out of ranking, marketing, or both from Profile → Notifications.
Lodge a complaint: with the National Centre for Personal Data Protection of Moldova (https://datepersonale.md).
How long we keep data
Account data: until you delete your account.
Booking data: 7 years for tax compliance (anonymised after account deletion).
Activity data: 24 months from the last action, then aggregated.
SMS logs: 24 hours.
Cookies
Essential storage keeps the site working: your sign-in session, your language preference, and a Google reCAPTCHA security check that protects our backend from abuse. These cannot be switched off, because the site does not work without them.
Optional analytics is Google Analytics 4 (Google Ireland Limited). It sets the _ga and _ga_* cookies and sends page views to Google together with a random visitor id. It loads only after you accept it in the cookie banner, never before.
We use no advertising cookies and no cross-site advertising trackers.
You can change or withdraw your choice at any time in "Your cookie choice" at the bottom of this page.
Votre choix sur les cookies
Les cookies essentiels restent toujours actifs, car le site ne fonctionne pas sans eux. Google Analytics ne fonctionne que tant que vous l'acceptez, et vous pouvez changer de réponse ici à tout moment.
Les statistiques couvrent des données d'usage anonymes et, pour les clients connectés, des données pseudonymes qui nous servent à améliorer le produit.