Last updated: 21 October 2026
This Privacy Policy explains how Nextpoint Innovations Limited collects, uses, shares and protects the personal data of people who use the website resacast.com (the "Website") and the Resacast services. It also explains the rights users have over their data under the UK GDPR and the Data Protection Act 2018.
The data controller is Nextpoint Innovations Limited, a company registered in England and Wales under number 14724520, whose registered office is at Suite F, Rear Office 48a High Street, Hadleigh, Ipswich, Suffolk, England, IP7 5AL. For any question about personal data, users are invited to use the chat on the Website as a priority, or to write to contact@resacast.com.
When a user creates an account, makes a purchase or contacts Resacast, Nextpoint Innovations Limited collects identification and contact data: first name, last name, email address and phone number.
For each restaurant booking request, Nextpoint Innovations Limited collects the details needed to handle it: the restaurant or type of cuisine requested, date and time, number of people, and any special request the user chooses to add, such as an occasion or a seating preference. Users are asked not to include health information, such as allergies, in their requests.
Nextpoint Innovations Limited also collects payment and billing data (amounts, dates, the last four digits and expiry date of the card), the history of bookings, requests and chat conversations, the user’s plan and Magazine status, and technical data such as IP address, browser type, pages viewed and connection dates. Full card details are handled by a specialised payment provider and are never stored by Nextpoint Innovations Limited.
Data are used to create and manage the user account, handle booking requests, provide the Personal Assistance Plan and the Magazine, take payments, make receipts available in the user space, send renewal reminders, and answer support requests. This processing is necessary to perform the contract with the user.
Data are also used to keep invoicing and accounting records, and to answer requests from competent authorities. This processing is necessary to meet Nextpoint Innovations Limited’s legal obligations.
Technical and usage data are used to secure the Website, prevent fraud and abuse, and improve the services. This processing is based on Nextpoint Innovations Limited’s legitimate interest in running a secure and reliable service.
Marketing emails about Resacast offers are only sent with the user’s consent, or where the law allows it for existing customers. Every marketing email contains an unsubscribe link, and consent can be withdrawn at any time without affecting processing carried out before.
No decision producing legal effects is made about users by automated means only.
Data are only shared where necessary, with the following recipients. Authorised Resacast staff handle requests and support. The restaurant concerned by a booking receives the details needed to hold the table, such as the guest’s name, phone number, number of people and special requests. Booking platforms and partner providers involved in handling a booking or a request receive the same details, only for that booking or request and with the consent the user gives at checkout. Where a restaurant asks for card details to secure a booking, these details are passed to the restaurant only after the user has validated it, and the restaurant is then responsible for them under its own policy. A specialised payment provider processes card payments. Technical providers support hosting (Amazon Web Services EMEA SARL), email delivery, chat and website maintenance, and act only on Nextpoint Innovations Limited’s instructions. Competent authorities receive data only where the law requires it.
Nextpoint Innovations Limited never sells users’ personal data.
Data are hosted by Amazon Web Services EMEA SARL on servers located in Ireland (European Union). If data need to be transferred outside the country or region whose law applies, Nextpoint Innovations Limited makes sure the transfer is protected by a safeguard recognised by the UK GDPR and the Data Protection Act 2018, such as an adequacy decision or standard contractual clauses.
Account data are kept while the account is active and for 3 years after the last activity. Invoicing and accounting data are kept for 6 years, as required by law. Technical logs are kept for 12 months. Data used for marketing are kept for 3 years after the last contact, unless the user unsubscribes earlier. At the end of these periods, data are deleted or anonymised.
Nextpoint Innovations Limited uses technical and organisational measures to protect personal data, including encrypted connections, restricted and controlled access, and monitoring against unauthorised access. No system is completely secure, but Nextpoint Innovations Limited works to protect data in line with industry standards.
Under the UK GDPR and the Data Protection Act 2018, users can access their data, correct it, ask for it to be deleted, restrict or object to its use, receive it in a portable format, and withdraw their consent at any time. Requests can be made by chat or by email to contact@resacast.com, and are answered within one (1) month. Users can also complain to the Information Commissioner’s Office (ICO).
Cookies are small files stored on the user’s device when visiting the Website.
The Website only uses cookies and similar technologies (such as local storage) that are strictly necessary for it to work: remembering the language chosen, remembering the booking details until checkout is complete, keeping the user logged in and running the chat. No analytics or advertising cookies are used. These cookies do not require consent and cannot be switched off without affecting the Website. The cookies used are: the language cookie (NEXT_LOCALE), the browser storage that keeps the booking details during checkout, and the cookies and storage of the chat widget, which keep the conversation going.
The Resacast services are reserved to adults aged 18 or over. Nextpoint Innovations Limited does not knowingly collect data about minors. If such data is identified, it is deleted.
Nextpoint Innovations Limited may update this Privacy Policy to reflect legal, technical or service changes. The version in force is the one published on the Website, with the date shown at the top of this page. Users are informed by email of any significant change.
For any question about this Privacy Policy or to exercise a right, users are invited to use the chat as a priority, or to write to contact@resacast.com.