Skip to content
Chez Pierre Man'Ouché

Privacy Policy

Last updated: November 2026

This page explains which personal data the chezpierremanouche.fr website processes, for what purpose, who it is shared with, how long it is kept and how to exercise your rights.

Data controller

The data controller is P.K. Business EURL (Bayonne Trade and Companies Register no. 920 741 857), which runs the Chez Pierre Man'Ouché restaurant, 38 rue d'Espagne, 64100 Bayonne, France. Phone: +33 5 59 15 58 92.

Reservation and contact form

The form on the home page collects your name, your email address, the purpose of your request and your message. This information is used only to answer your request: a table booking, a private hire of the restaurant or a question.

It is not stored in a database on the site: your message is sent by email to the restaurant's mailbox, from the Gmail (Google) account of CrushCode, which built and maintains the website, and CrushCode receives a copy. Your email address is set as the reply-to address so that the restaurant can answer you directly.

All fields of the form are needed to handle your request; without them we cannot answer it.

Spam and abuse protection

The form is protected by Cloudflare Turnstile, loaded with the home page, which tells human visitors from bots using technical signals from your browser, without any advertising cookie. When you send the form, the token it produces is checked with Cloudflare together with your IP address.

Your IP address is also used as a counter that limits submissions to five per minute. This counter is kept by our provider Upstash and is erased automatically at the end of the rate-limit window (see “Retention periods”).

A technical cookie, csrfToken, protects the form submission against forged requests. It expires after one hour and is deleted once the form is sent.

Audience measurement

The site uses Vercel Web Analytics to count page views in aggregate. This tool sets no cookie. The site uses no advertising tool.

Hosting

The site is hosted by Vercel Inc., in the United States. Like any host, Vercel processes the technical connection data (IP address, browser, requested page) needed to display the pages and to keep the service secure.

Links to other services

The “Delivery” and “Click & Collect” buttons lead to the restaurant's store on Uber Eats, and the Instagram links to the @chezpierre_manouche account. These services apply their own privacy policies.

Legal bases

  • Answering a booking or private hire request: steps taken at your request before entering into a contract.
  • Answering your other messages: the restaurant's legitimate interest in replying to the people who contact it.
  • Spam protection and site security: the restaurant's legitimate interest in protecting its website and form.
  • Cookieless audience measurement: the restaurant's legitimate interest in knowing how its website is visited.

Recipients

Your data is intended for the restaurant Chez Pierre Man'Ouché. CrushCode, which built and maintains the website, receives a copy. The site's technical providers process it on the restaurant's behalf: Vercel (hosting and audience measurement), Google (sending and receiving emails), Cloudflare (spam protection) and Upstash (submission limits).

Transfers outside the European Union

Some of our providers are based in the United States or process data there: Vercel (hosting and audience measurement), Google (emails), Cloudflare (anti-bot) and Upstash (anti-abuse). These transfers rely on the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) for providers certified under it, and on the standard contractual clauses adopted by the European Commission, included in their data processing terms.

Retention periods

  • Messages sent through the form: 3 years from our last exchange with you, then deleted.
  • Copy received by CrushCode: deleted within the same period.
  • Hosting provider's technical logs: 30 days at most.
  • Anti-abuse counters (Upstash), tied to your IP address: the length of the rate-limit window, at most 31 minutes, then erased automatically.
  • Audience measurement (Vercel Web Analytics): aggregated statistics only; the technical identifier, computed without a cookie, changes every day.
  • csrfToken cookie: one hour at most; it is deleted once the form is sent.
  • NEXT_LOCALE language cookie: until you close your browser.

Cookies

The list of cookies used by the site, all strictly necessary, is given in the cookie policy.

Your rights

You can ask to access your data, to have it corrected or erased, to restrict its processing and to receive it in a portable format, and you can object to its processing. You can withdraw any consent you have given at any time, and set instructions on what happens to your data after your death (article 85 of the French Data Protection Act). To exercise these rights, write to P.K. Business EURL, 38 rue d'Espagne, 64100 Bayonne, France, or contact the restaurant through the contact form or by phone on +33 5 59 15 58 92. You can also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).