Privacy policy

Last updated: 9 August 2026 (TheFork and DiningCity booking data added)

Who we are

Graham’s Kitchen B.V. (“we”, “us”) is the data controller responsible for the personal data described in this policy.

Graham’s Kitchen B.V.
Hemonystraat 38, 1074 BS Amsterdam, The Netherlands
Chamber of Commerce (KvK): 64748472
Email: info@grahamskitchen.amsterdam
Telephone: +31 (0)20 364 2560

What we collect, and why

We only collect what we need to hold your table and look after you properly.

When you book a table

Bookings made through our website are handled through Guestplan, a reservation system operated by eTender BV. When you book, we collect your name, email address, telephone number, party size, date and time, and anything you tell us about allergies, dietary requirements or the occasion.

Some bookings also reach us through TheFork or DiningCity. If you book with us via one of these platforms, that platform collects your booking details and shares them with us so we can prepare your table. Their own privacy policies govern how they handle your data before it reaches us ; once we have it, we handle it the same way as any other booking, as set out in this policy.

We use this to hold and manage your reservation, to contact you about it, and to prepare for your visit. The legal basis is performance of a contract with you (Article 6(1)(b) GDPR).

Allergies and dietary requirements. Information about allergies or intolerances is health data, which the GDPR treats as a special category. We only record it when you choose to tell us, we use it solely to cook and serve your food safely, and we share it only with the kitchen and floor team who need it. The legal basis is your explicit consent (Article 9(2)(a) GDPR). You are never obliged to give it — though we would always rather know.

When you contact us

If you email or call us, we keep your message and contact details so we can reply and, where relevant, arrange your booking. The legal basis is our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR), or performance of a contract where the enquiry becomes a booking.

When you visit this website

This site has no analytics, no advertising trackers and no social media pixels. We do not profile visitors and we do not build marketing lists from website activity.

Cookies and third-party services

Booking widget

The booking page loads a widget from Guestplan (eTender BV, Keizersgracht 188, 1016 DW Amsterdam). When that widget loads it may set cookies and will receive your IP address. Guestplan processes reservation data on our behalf under a data processing agreement. Their own privacy policy is at guestplan.com/privacy-policy.

Fonts

This site currently loads typefaces from Google Fonts (Google Ireland Limited). When a page loads, your IP address is transmitted to Google in order to serve the font files. No cookies are set by this. We are in the process of hosting these fonts ourselves so that this transfer stops.

Links to other sites

Our contact page links to Google Maps. We do not embed a live map, so nothing is loaded from Google Maps unless you choose to follow that link — at which point Google’s own privacy policy applies.

Photography and image editing

Photographs on this website are updated from time to time as our menu, drinks list or dining room change — for example, when we replace furniture — and are edited, including with AI tools, where needed for accuracy or to meet advertising requirements, such as removing or replacing an alcoholic drink shown in a shot. Our aim is always a fair and truthful representation of what’s on offer and how the restaurant currently looks: we do not use editing or AI generation to exaggerate portion size, presentation or quality beyond what a guest can expect to receive. If you have a question about a specific photograph, contact us at info@grahamskitchen.amsterdam.

Who we share your data with

We do not sell your personal data, and we do not share it for anyone else’s marketing. We share it only with:

• Guestplan (eTender BV), our reservation system provider;
• TheFork and DiningCity, where you have made a booking through one of their platforms;
• our accountant and bank, for payment and bookkeeping records;
• public authorities, where we are legally required to disclose it.

How long we keep it

• Booking records: 2 years after your visit, so we can recognise returning guests and resolve any queries.
• Allergy and dietary notes: kept with the booking record and deleted on the same schedule.
• Email correspondence: 2 years, unless it relates to a payment or a complaint.
• Invoices and financial records: 7 years, as required by Dutch tax law.

Your rights

Under the GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete your data;
• object to, or ask us to restrict, how we use it;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent — including for allergy information.

To exercise any of these, email info@grahamskitchen.amsterdam. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

Keeping your data safe

This website is served over an encrypted connection. Access to booking data is limited to the people who need it to do their job. Our reservation provider is contractually required to apply appropriate security measures.

Children

This site is not aimed at children, and we do not knowingly collect data from anyone under 16. Bookings that include children are made by an adult, and we only record what is needed to seat and feed the table safely.

Changes to this policy

If we change how we handle personal data, we will update this page and revise the date at the top.