Privacy

Last updated: 27 October 2026.

Who we are

The data controller is Just Cook Technologies Ltd, company number 17053705, registered in England and Wales, registered office 128 City Road, London, EC1V 2NX, trading as Waymark Hospitality. Email hello@waymarkhospitality.com. We are registered with the Information Commissioner's Office, registration number ZC262028.

This website

This site sets no cookies unless you say yes to recordings. It uses Fathom Analytics, a service that counts visits without cookies and without identifying you. It records the page, the time, your browser type and a rough location from your IP address, which it does not store. Fathom acts only on our instructions and does not use the data for its own purposes. If you arrive from the link on one of our clients' websites, the count also shows which website sent you, and nothing more about you.

You can still opt out. Stop counting my visits. That sets a small flag in your browser's storage on this site only, and is the one thing this site will ever store besides your answer about recordings, below, unless you say yes to them.

Recordings, if you say yes

When you first visit this site we ask whether we may record how you use it. If you say no, or do not answer, nothing is recorded and Contentsquare's code is not even loaded. We remember your answer in your browser's storage on this site only, so that we do not ask on every page. That is needed to carry out your choice and records nothing about you.

If you say yes, Contentsquare records the pages you visit, where you click and scroll, and how each page looks as you use it, so that we can see where visitors get stuck and improve the site. Anything you type into a box is never collected. Contentsquare also keeps small identifiers in cookies in your browser, to tell one visit from another. We use it only to improve this site.

Our lawful basis is your consent. You can take it back at any time with the "Your recording choice" button at the foot of every page, which asks you again, and recording stops when you say no. Taking it back is as easy as giving it.

Contentsquare SA, of Paris, records and stores this for us in Ireland, in the European Union, only on our instructions, and deletes each recording within three months.

If we have phoned you

We call pubs across England, and hospitality venues in Kent, to offer them a website. Your business name, address and hygiene rating come from the Food Standards Agency's public register. A phone number and website address may come from OpenStreetMap, Google or your own website. A company name may come from your own website or Companies House, and a director's name from Companies House. The name of the premises licence holder or designated premises supervisor may come from your council's public register of premises licences. A landlord's name may also come from the venue's own website where it names its hosts, and the name of a company's owner from Companies House's register of persons with significant control. We also read the venue's public TripAdvisor page through a data supplier for its rating, its review count and the name the owner replies under. We check every number against the Telephone Preference Service and Corporate Telephone Preference Service before we dial.

If your venue has a public Facebook or Instagram page of its own, we also read its business details and its latest posts, such as opening times, events and a change of licensee, so that our call is about your venue as it is now. We keep business facts only, never a customer's name, comment or reaction.

We keep a note of when we called and what you said. Our calls and video meetings are recorded and transcribed, and Zoom's AI writes a summary of each. We keep the recordings, transcripts and summaries for two years, so that we can learn from them, and then delete them. Anything we write up to learn from leaves out names. If we build you a demo site from your venue's website and Google listing, it is protected by a password, hidden from search engines, and its link stops working after seven days, or sooner if you ask. We keep a private copy of what we built, which only we can see, and we delete it if you ask us to.

We use this information because we have a legitimate interest in offering our service to local businesses. We keep a venue's details while it is on the Food Standards Agency's register and might want our service.

If you ask us to ring you

If you use a form on this site to ask us to ring you or to request a website viewing, we get your name, your venue's name, your postcode or town, your mobile number, your email address and anything you write. For a viewing, we also get your requested day and time and whether your venue is already open. We use them only to respond to your request, confirm arrangements and contact you as you asked. A requested viewing time is not confirmed until we agree it with you. The form's message reaches us by email through Resend. We keep them for as long as we keep your venue's call notes.

If you use our free audit

The free audit runs for the pub you name when you sign up on this site, for a pub that books a demonstration with us, and for the pubs we are going to demonstrate to in person. It reads public information about the pub: its own website, its listings on Google and Bing, its Facebook page and Instagram, its public reviews on Google, TripAdvisor and Facebook, what people searching for pubs in its area see on Google and Bing, and what ChatGPT, Gemini and Perplexity answer when asked about pubs there. We score what we find and keep the scores and our notes against that pub, which is business information, for as long as we hold the pub's record, and we show them in your Waymark Compass account. The searches and the AI answers are fetched for us by DataForSEO. The audit uses no cookie.

We read a pub's public reviews for its star rating, how many reviews it has, how recent the newest one is and whether the pub replies. From the newest fifty we note the themes guests raise most, as counts: for example that twelve reviews praise the garden. We remove reviewers' names before anything reads the words, we keep no review's words and no reviewer's name, and we never show a quote with a name. If you run the pub and a theme is wrong, tell us in Compass and we will look again.

When your pub's audit is finished we send one text and one email to the mobile number and email address you gave when you signed up, with the link to it in Compass. We send them once. To stop texts from us, reply STOP; to stop emails, reply to the email.

Your right to stop our calls

You can ask us not to call at any time, for any reason, on the call or by emailing hello@waymarkhospitality.com, and we will stop. We add your number to our own do-not-call list the same day and keep it there for good, so that we never call it again.

Your other rights

You can ask us what we hold about you, and ask us to correct it, limit how we use it, or delete it, by emailing hello@waymarkhospitality.com. If you are unhappy with how we have handled your data, tell us first and we will reply within 30 days. You can also complain to the Information Commissioner's Office at ico.org.uk.

If you become a client

We use your details to build and run your site under our agreement with you. We keep your contact details, your contract and your payment records for as long as you are a client and for six years after, because tax law requires it. Payments are taken by Stripe; we never see your card number.

If you have a website from us, you can sign in to your own zone on our site with your email address: we email you a link, and a small cookie keeps you signed in on that device for a month from your last visit. We keep the email addresses and the mobile number you give us for it, and a record of what passes between us there: the emails we send you and your replies, your messages in the zone's chat and its answers, the changes you ask for and where they stand, and, for each call between us after you became a client, its date, its length and Zoom's AI summary of it. The zone's chat answers with Anthropic's help, the zone runs on Cloudflare with its database in the European Union, and its emails go through Resend. We delete all of it when you leave us, once we have handed over your website; copies in our weekly backups are gone within eight weeks.

If we have built a demo website for your pub, we may invite you to your own zone on our site, with your email address, so that you can see how it works. We keep the email address and the mobile number you give us for it, what passes between us there, and any enquiries sent through your demo, with the replies suggested for them; we keep an enquiry for 90 days and delete it within a day or so after that. We delete all of it if we stop talking to you about your website, and if you become a client it carries on as your client zone, as the paragraph above says.

In your zone you can try our phone answerer by talking to it in your browser. It is an AI, answering as a made-up pub. What is said goes to ElevenLabs, our AI voice supplier in the United States, the European Union and Singapore, which keeps a transcript for 30 days and no audio. We do not send ElevenLabs your email address. If it takes a message, we email it to you and to nobody else. We keep a count of how many times you try it each day, for a week, and delete it with your zone.

If you tell us what is on at your pub, we put it in the calendar in your zone and, once we have checked it, on your website. You can tell us by writing in your zone, by email, by text to our number or on a call with us, and you can send photos with your words. We keep what you send and your photos for as long as you are a client, and delete them with the rest of your zone. Once a day we also read the public Facebook and Instagram pages of your pub, only those you have told us about, for posts about what is on; we skip any post that names people. Anthropic, which makes the Claude AI, reads your words, your photos and those posts for us, only on our instructions, to turn them into events and to ask you when something is unclear. Your photos are stored with Cloudflare in the European Union, and your texts reach us through Twilio. The one exception is what goes on your website, or into a change we prepare for checking before it goes there: an event's name and words, and any photo with it, stay in the history of your website's files on GitHub.

When we run extras for a pub

Some pubs that have a website from us also take an extra: an AI assistant that answers the pub's phone when nobody can, or, on its website, a box to sign up for its news emails, a form for party and function enquiries, or a chat. When we run these we act for the pub. The pub is in charge of its guests' and callers' details, and we use them only to run the extra for the pub, on its instructions. The pub's own privacy notice says more about what it does with them.

To run them we use these companies, as well as those under "Who helps us": ElevenLabs (the AI voice that answers the phone; the United States, the European Union and Singapore), Twilio (the pub's phone line and its texts; the United States), Resend (the emails, and the pub's list of guests who signed up for its news; the United States), Cloudflare (the service that the forms, the chat and the calls pass through, with its database in the European Union, and Turnstile, which checks that a visitor is a person) and Anthropic (the chat's answers and the suggested replies to enquiries; the United States). What protects data sent to the United States is as under "Data sent outside the UK" below.

Who helps us

These companies handle data for us, only on our instructions: Google Workspace (our email), Zoom (calls, video meetings, recordings, transcripts and AI summaries of them), Outscraper (collects Google Maps and TripAdvisor details for us), DataForSEO (fetches public search results, Google and Bing listings, the AI assistants' answers and page reads for the free audit), ScrapeCreators (reads a venue's own public Facebook and Instagram pages for us), Resend (meeting invitations), Stripe (payments), Cloudflare (hosting this site and our clients' sites), DigitalOcean (our server and database in London, which hold our records of the venues we contact and of our clients, and run Waymark Compass's assistants), GitHub (storing our clients' site files and weekly backups of our records), Anthropic (drafting the changes a client asks for), OpenAI (turning a venue's own photos into the drawings on its demo site and website), Higgsfield (turning a venue's drawing into the short moving picture at the top of its page), Fathom (counting visits to this site and to our clients' sites), Contentsquare (recording how visitors use this site, only if they say yes; Ireland, in the European Union) and WhatsApp, if a client messages us there.

Data sent outside the UK

Some of these companies are in the United States. Where your data goes there, it is protected by the UK's data bridge with the US, or by the UK's approved contract terms for international transfers. ScrapeCreators is in the United States too, but neither protection covers it: it is not on the data bridge, and we have no contract with it beyond its own terms. It reads only a venue's own public Facebook and Instagram pages for us. Email us to ask which applies to which company.