Privacy Notice

October 2026

HospitaliTop is a trading brand of SAASTRO. This notice explains how we handle personal data in two situations: when you use this website or contact us, and when information about a hospitality business you run appears in the business data we compile.

Who is responsible

The controller of your personal data is SAASTRO, the trading name of:

Name: Juan Carlos de la Encina López
Tax ID (NIF): 70354405G
Address: Calle San Blas 1, 45510 Fuensalida (Toledo), Spain
Privacy contact, objections and removal requests: privacy@saastro.io

If you contact us or claim a listing

When you fill in a form on this site we receive what you type into it:

Register your interest: your name, email address and phone number.
Claim your listing: the business name and postcode, your name, your role at the business, your email address, your phone number if you give it, and whether you would like to receive news and offers from us.

Alongside a form we also record the page you sent it from, the referring page, any campaign tags in the link (such as utm_ parameters or an advertising click identifier) and the date and time.

We use this to answer your enquiry, to verify a listing claim and to contact you about it by email, phone or WhatsApp, as you agreed when you sent the form. The legal basis is the steps you asked us to take and our legitimate interest in replying to you. If you ticked the box for news and offers, we send them on the basis of your consent, which you can withdraw at any time by writing to the privacy contact above.

Business information we compile

HospitaliTop maintains a record of licensed food and drink businesses in the United Kingdom — restaurants, pubs, bars, hotels, takeaways and caterers — and sells ranked lists of those businesses to companies that supply the hospitality sector.

Most of this is information about businesses, not people. But if you run a business as a sole trader or in a partnership, details about that business can be personal data about you. The information we may hold includes:

the business name, trading address and category;
the business’s own website, contact email address and phone number, and links to its social media pages, where the business publishes them;
facts from public registers, such as hygiene ratings, company status, and notices published in The Gazette;
the technology the business appears to use on its website, such as its booking or ordering system.

Where it comes from. Public registers, including the Food Standards Agency food hygiene register, Companies House, The Gazette and local authority licensing registers; openly licensed datasets, such as Overture Maps; and the business’s own public website, together with public domain-name and website-certificate records.

Why and on what basis. We use it to help companies that sell to hospitality businesses find the ones their product is relevant to. The legal basis is our legitimate interest, and our customers’, in business-to-business prospecting. Our customers may receive the business details above as part of a list.

Your right to object. You can object at any time, and you do not need to give a reason. Write to privacy@saastro.io with the business name and postcode. We will remove the business’s contact details, stop including it in lists we supply, and keep only a minimal record of your request so that the business is not added back.

Who else processes your data

We use service providers who process data on our behalf, and only for that purpose:

Cloudflare hosts this website and our systems, provides the privacy-friendly visitor statistics described below, and runs the bot check (Turnstile) on our forms.
Google serves the fonts used on this site: your browser requests them directly from Google’s servers, which receive your IP address when the page loads.
Resend delivers to us the messages sent through the Register your interest form.

Some of these providers are based in, or may process data in, the United States. Where that happens, the transfer relies on the safeguards that the provider offers under data protection law.

Visitor statistics

We count visits to this site with Cloudflare Web Analytics, which does not use cookies or store anything on your device and does not identify individual visitors.

How long we keep it

We keep form submissions for as long as we need them to deal with your enquiry or claim and any relationship that follows from it. We keep business information while it remains relevant to the service, and we remove it when you object or ask us to delete it. We keep a record of each objection so that we can keep honouring it.

Your rights

You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict how we use it, to object to its use, to receive it in a portable format, and to withdraw consent where we rely on it. Write to privacy@saastro.io and we will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the Spanish Data Protection Agency (aepd.es). We would appreciate the chance to put it right first.

Changes to this notice

We will update this notice when what we do with personal data changes. The date at the top shows when it was last revised.