Last updated: 21 October 2026
This Privacy Policy explains how Hilldan Services Limited collects, uses, shares and protects the personal data of people who use the website zenalio.com (the “Website”) and the Zenalio services. It also explains the rights users have over their data under the UK GDPR and the Data Protection Act 2018.
The data controller is Hilldan Services Limited, a company registered in England and Wales under number 16315078, whose registered office is at 125 Ashfield Avenue, Bushey, England, WD23 4LJ. For any question about personal data, users are invited to use the chat on the Website as a priority, or to write to contact@zenalio.com.
When a user creates an account, makes a purchase or contacts Zenalio, Hilldan Services Limited collects identification and contact data: first name, last name, email address and phone number.
For each restaurant booking request, Hilldan Services Limited collects the details needed to handle it: the restaurant or type of cuisine requested, date and time, number of guests, and any special request the user chooses to add, such as an occasion or a seating preference. Users are asked not to include health information, such as allergies, in their requests.
Hilldan Services Limited also collects payment and billing data (amounts, dates, the last four digits and expiry date of the card), the history of bookings, requests and chat conversations, the user’s plan and Magazine status, and technical data such as IP address, browser type, pages viewed and connection dates. Full card details are handled by the payment provider and are never stored by Hilldan Services Limited.
Data are used to create and manage the user account, handle booking requests, provide the Full Time Assistant plan and the Magazine, take payments, make receipts available in the user space, send renewal reminders, and answer support requests. This processing is necessary to perform the contract with the user.
Data are also used to keep invoicing and accounting records, and to answer requests from competent authorities. This processing is necessary to meet Hilldan Services Limited’s legal obligations.
Technical and usage data are used to secure the Website, prevent fraud and abuse, and improve the services. This processing is based on Hilldan Services Limited’s legitimate interest in running a secure and reliable service.
Marketing emails about Zenalio offers are only sent with the user’s consent, or where the law allows it for existing customers. Every marketing email contains an unsubscribe link, and consent can be withdrawn at any time without affecting processing carried out before.
No decision producing legal effects is made about users by automated means only.
Data are only shared where necessary, with the following recipients. Authorised Zenalio staff handle requests and support. The restaurant concerned by a booking receives the details needed to hold the table, such as the guest’s name, phone number, number of guests and special requests. Where a restaurant asks for card details to secure a booking, these details are passed to the restaurant only after the user has validated it, and the restaurant is then responsible for them under its own policy. The payment provider processes card payments. Technical providers support hosting (Amazon Web Services), email delivery, chat and website maintenance, and act only on Hilldan Services Limited’s instructions. Competent authorities receive data only where the law requires it.
Hilldan Services Limited never sells users’ personal data.
Data are hosted by Amazon Web Services on servers located in Ireland (European Union). If data need to be transferred outside the country or region whose law applies, Hilldan Services Limited makes sure the transfer is protected by a safeguard recognised by the UK GDPR, such as an adequacy decision or standard contractual clauses.
Account data are kept while the account is active and for 3 years afterwards. Invoicing and accounting data are kept for 6 years, as required by law. Technical logs are kept for 12 months. Data used for marketing are kept for 3 years after the last contact, unless the user unsubscribes earlier. At the end of these periods, data are deleted or anonymised.
Hilldan Services Limited uses technical and organisational measures to protect personal data, including encrypted connections, restricted and controlled access, and monitoring against unauthorised access. No system is completely secure, but Hilldan Services Limited works to protect data in line with industry standards.
Under the UK GDPR and the Data Protection Act 2018, users can access their data, correct it, ask for it to be deleted, restrict or object to its use, receive it in a portable format, and withdraw their consent at any time. Requests can be made by chat or by email to contact@zenalio.com, and are answered within one (1) month. Users can also complain to the Information Commissioner’s Office (ICO), the UK supervisory authority.
Cookies are small files stored on the user’s device when visiting the Website.
The Website only uses cookies and similar technologies (such as local storage) that are strictly necessary for it to work: remembering the booking in progress until checkout and running the chat. No analytics or advertising cookies are used. These technologies do not require consent and cannot be switched off without affecting the Website. The ones used are: bookingData (session storage) and bookingData:persist (local storage), which keep the booking in progress until payment.
The Zenalio services are reserved to adults aged 18 or over. Hilldan Services Limited does not knowingly collect data about minors. If such data is identified, it is deleted.
Hilldan Services Limited may update this Privacy Policy to reflect legal, technical or service changes. The version in force is the one published on the Website, with the date shown at the top of this page. Users are informed by email of any significant change.
For any question about this Privacy Policy or to exercise a right, users are invited to use the chat as a priority, or to write to contact@zenalio.com.