Your table is private.
So are you.

1. 01

   Where We Get Your Information

   We collect information about you in two ways.

   Directly from you. When you create a PRIMA account, make a booking, contact us, or use our apps and websites, you give us information yourself.

   From the restaurants, venues and partners you visit. We work with restaurants and venues that use PRIMA to fill their availability. Where you hold a reservation record with one of our partner venues, that venue may share a limited set of information about you with us so that we can operate the PRIMA network. We receive this information even if you have never used PRIMA yourself.

   If we have received information about you from a partner venue and you have not used PRIMA before, we will contact you to tell you, normally within one month of receiving it.

   The information a venue shares with us is limited to:

   • your first and last name;
   • your email address and telephone number;
   • your reservation history at that venue — dates, times, party size, whether the booking was honoured, and how it was made;
   • transaction information — the approximate value band of the bill, the currency, and whether the visit took place.

   Venues do not share, and we do not accept, information about your dietary requirements, food allergies, or accessibility needs. We exclude these at the point of collection so that they never reach our systems. We also do not accept free-text notes written about you by restaurant staff, your date of birth, or your payment card details.

2. 02

   Why We Use Your Information

   What we doOur legal basis

   Create, confirm, change and cancel your reservationsPerformance of our contract with you, or our legitimate interests in operating the service

   Recognise you across the venues in our network, so we can show you availability that suits youOur legitimate interests in operating a matching network

   Generate recommendations and personalised results, and rank what we show youOur legitimate interests in providing a useful service

   Develop and improve the analytical and machine learning models behind those recommendationsOur legitimate interests in improving our service

   Work out which bookings were fulfilled, so that we and our partner venues are paid correctly, and resolve disputesOur legitimate interests in accurate settlement

   Detect and prevent fraud, no-show abuse and misuse of the platformOur legitimate interests in protecting the service

   Send you marketing about PRIMAYour consent, or our legitimate interests where you are already a PRIMA customer — see Marketing below

   Meet our legal and regulatory obligationsLegal obligation

   Where we rely on legitimate interests, we have carried out an assessment balancing those interests against your rights. You can ask us for a summary of it at any time.

3. 03

   Your Rights

   You can, free of charge:

   • Ask what we hold about you and get a copy.
   • Correct anything wrong.
   • Ask us to delete it.
   • Object to us using it, where we rely on legitimate interests — including our recommendations and profiling. If you object, we will stop unless we have compelling grounds that override your rights, and we will explain them if so.
   • Ask us to restrict how we use it while a question is resolved.
   • Ask for a portable copy of information you gave us.
   • Opt out of marketing at any time.

   To exercise any of these, email prima@primavip.co or use the controls in your account. We respond within one month.

   If we received your information from a venue rather than from you, these rights apply in exactly the same way, and you exercise them with us directly — you do not need to go through the venue.

   If you are unhappy with how we have handled your information, you can complain to the data protection authority where you live. In France that is the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr.

4. 04

   Recommendations and Automated Processing

   We use automated processing, including profiling, to decide which venues, offers and availability to show you and in what order.

   How it works, in plain terms. We look at where you have booked before, how recently and how often, the kinds of venue you tend to choose, the size and timing of your bookings, and what is available across our network right now. From that we build a picture of what you are likely to be looking for, and we rank results accordingly. We also use this information, together with information about other users, to train and improve the models that produce those rankings. Wherever we can achieve the same result using data that no longer identifies anyone, we do.

   What it does not do. These decisions affect which restaurants you see and in what order. They do not decide whether you can use PRIMA, what you pay, or anything with a legal effect on you. We do not make decisions about you based solely on automated processing that produce legal effects or that significantly affect you in a similar way.

   What we will not infer. We do not use your information to work out or assign characteristics such as your health, dietary or religious requirements, and we do not use any such characteristic in our recommendations, even where it might in principle be guessed from the kinds of venue you visit. We apply technical controls designed to prevent this.

   You can object. You have the right to object to this profiling at any time. See Your rights above.

5. 05

   How Long We Keep Your Information

   Information we process on behalf of a venue. Where we handle reservation information as a service to a venue, we delete or return it within 30 days of that venue’s agreement with us ending.

   Information we hold in our own right. Information you gave us directly, and the limited set of information venues share with us, is held for as long as we need it to operate the PRIMA network. This does not stop when a venue’s relationship with PRIMA ends — we hold it as part of the network, not on that venue’s behalf. We review whether we still need it at least every two years and delete what we no longer need.

   You can ask us to delete your information at any time, and you can object to us using it. Those rights apply regardless of any agreement we have with a venue, and we act on them ourselves. See Your rights.

6. 06

   Marketing

   If you are a PRIMA user, we may send you offers and news about PRIMA services by email, text message or in the app. You can opt out at any time, in any message or in your account settings.

   If a venue shared your details with us and you have not used PRIMA, we will only send you marketing by email or text if you have given consent for PRIMA specifically to contact you — normally at the point you made your booking. If you have not, we will not email or text you marketing. We may still contact you once to tell you we hold your information and explain your rights, which is not marketing but a legal requirement.

   You can withdraw consent at any time. We keep a permanent record of opt-outs so that we do not contact you again by mistake, even if your details reach us again from another source.

7. 07

   Who We Share Your Information With

   We share information with service providers who help us run PRIMA — hosting, databases, payments, email and text messaging, and error monitoring. The full list, with what each one does, where it is located and the safeguards that apply, is published at primaapp.com/subprocessors and kept current.

   When you book through PRIMA, we pass the venue the information it needs to hold your table. The venue then uses that information as its own controller, under its own privacy notice.

   We do not sell your information. We do not use it for advertising across other companies’ websites or apps. We do not share it with any third party other than the service providers listed, our professional advisers, and where the law requires it.

   Your mobile phone number and your consent to receive text messages are never shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are excluded from every category of sharing described in this policy, other than passing your number to the provider that delivers our messages.

   Where we use large language models, they run inside our own cloud account. Your information is not sent to any model provider’s own service, is not retained by them, and is not used to train their models.

8. 08

   Where Your Information Is Held

   PRIMA VIP INC. is based in the United States, and our platform currently operates in the United States. Where information moves from the European Economic Area to us, we rely on the European Commission’s Standard Contractual Clauses. You can request a copy from us.

   From 31 October 2026, information about people in the European Economic Area will be stored and processed in Europe, in Amazon Web Services’ Paris region. We will update this page when that is complete.

9. 09

   Cookies and Consent

   We use a small number of cookies and similar technologies. Strictly necessary items are always on: your login session, your theme preference, and the referral attribution cookie that records which concierge, venue or campaign introduced you so the right partner is credited for your booking. We rely on our legitimate interests for these.

   First-party analytics — page views and interactions stored in our own systems, together with a one-time lookup of your country — run only if you choose Accept on the cookie banner. We use no third-party advertising trackers. If you decline, or later change your mind, analytics stop immediately. Your choice is stored on your device.

   Manage cookie preferences

10. 10

    Security

    We take the security of your personal information seriously and apply layered protections across our platform:

    • Account access: Passwords are stored as one-way cryptographic hashes, they cannot be read or recovered, even by us. Two-factor verification is required for any sensitive action, including changes to payment information, password, or account email. Every login is recorded with device, IP address, and timestamp.
    • Banking information: Bank account numbers, routing numbers, IBANs, and SWIFT codes are encrypted at rest in our database using AES-256, the same standard used by banks and major payment processors. The encryption key is stored separately from the database, so a database leak alone would not expose those numbers. Inside the PRIMA dashboard, and in every administrative or accounting export, only the last four digits are ever displayed.
    • Card payments: PRIMA never sees or stores full credit card numbers. Card data is sent directly from your browser to our payment processor, Stripe, which is PCI-DSS Level 1 certified. We retain only the card brand and last four digits, used solely for receipts and dispute handling.
    • API access: Every API token is scoped to the specific permissions and venues granted to it. All endpoints are rate-limited to prevent abuse. Webhook deliveries are signed and verified cryptographically.
    • Monitoring and audit: Every change to bookings, profiles, and payout details is recorded in an immutable audit log. Errors are tracked through Sentry, configured to strip personal information before reports are stored.

    Despite these safeguards, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. 11

    Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date above. Dated previous versions remain available from the link at the bottom of this page.

12. 12

    Who We Are

    PRIMA VIP INC., 2045 Biscayne Blvd, Unit #495, Miami, Florida 33137, United States, is the controller of the information described in this notice.

    Data protection contact: prima@primavip.co

    We will publish the name, address and contact details of our representative in the European Union here by 30 September 2026.

Previous versions: May 13, 2026

© 2026 PRIMA · Members-only access