Privacy Policy

Obscura Cocktail Bar & Eatery · Last updated: Sep 30, 2026

1. Introduction

We respect your privacy. This policy explains what personal information we collect when you visit our website, make a booking, join our mailing list or visit us in person, how we use it, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Who is responsible for your information

The responsible party is Patent Cocktail Bar (Pty) Ltd (registration number 2023/822058/07), trading as Obscura Cocktail Bar & Eatery, 199 Oxford Road, Rosebank, Johannesburg.

As provided for in POPIA, the head of our business acts as our Information Officer. You can reach them at hello@obscurabar.co.za or 010 500 7573.

3. Information we collect

When you make a booking (through Dineplan, by email or by phone): your name, phone number, email address, date and time of booking, number of guests, the occasion (if you share it), seating preferences and any notes you add.

Dietary and allergy information: if you tell us about an allergy or dietary need, we record it only so that we can prepare your food safely. Because allergy information can reveal information about your health, we only collect it with your consent and use it for no other purpose.

When you pay a deposit or bill: payment is processed by our payment providers. We receive confirmation that payment was made and the last digits of the card, but we do not receive or store full card numbers.

When you book a private event: contact details for the organiser, company details (if applicable), guest numbers, menu choices and invoicing information.

When you sign up for our newsletter or offers: your name, email address and your marketing preferences.

When you use our website: technical information such as your IP address, browser type, device, pages visited and how you arrived at our site, collected through cookies and similar technologies (see section 9).

When you visit the venue: our premises may be monitored by CCTV for the safety and security of guests and staff. We may also photograph the venue for marketing (see our Terms and Conditions).

When you contact us: the content of your emails, messages, reviews or social media messages to us.

4. How we use your information

We use your personal information to:

     

      • manage and confirm your reservation, and contact you about it (for example, to confirm, remind or tell you about a change);

      • process deposits, payments and refunds;

      • plan and deliver private events;

      • prepare food safely where you have told us about an allergy;

      • respond to your queries, feedback and complaints;

      • send you news, events and offers, where you have agreed to receive them;

      • keep our venue, guests and team safe;

      • improve our website, menu and service; and

      • meet our legal obligations, including tax, liquor-licensing and accounting requirements.

    We only process your information where we have a lawful reason to do so under POPIA: because it is needed to carry out your booking, because you have consented, because the law requires it, or because it is in our legitimate interests (such as security) and does not override your rights.

    5. Direct marketing

    We will only send you marketing emails or messages if you have opted in, or if you are an existing guest and the message is about similar services from us, as POPIA allows. Every marketing message includes a simple way to unsubscribe, and you can also opt out at any time by emailing hello@obscurabar.co.za. We never sell your personal information.

    6. Who we share it with

    We share your information only where needed, and only with parties who are required to protect it:

       

        • Booking platform: Dineplan, which manages our reservations;

        • Payment providers: to process deposits, payments and refunds;

        • Email and marketing platforms: to send newsletters if you have subscribed;

        • IT, website hosting and analytics providers: to run and improve our website;

        • Professional advisers: such as our accountants, auditors and lawyers; and

        • Authorities: the police, courts or regulators where the law requires us to.

      7. Transfers outside South Africa

      Some of our service providers (for example, email, cloud hosting or analytics services) may store information on servers outside South Africa. Where this happens, we make sure the information is protected in line with section 72 of POPIA — for example, because the country has adequate data-protection laws, or the provider is bound by an agreement that protects your information to a similar standard.

      8. How long we keep it

      We keep personal information only for as long as we need it for the purpose it was collected, or as required by law:

         

          • booking records: [2 years] after your booking;

          • financial and tax records: 5 years, as required by South African tax law;

          • CCTV footage: [30 days], unless needed for an incident investigation;

          • marketing lists: until you unsubscribe.

        After that, we delete or anonymise it securely.

        9. Cookies

        Our website uses cookies — small files stored on your device — to make the site work, remember your preferences and help us understand how visitors use it (for example, through [Google Analytics / Meta Pixel]). You can block or delete cookies through your browser settings. Some parts of the site, such as the booking widget, may not work properly without them.

        10. Keeping your information secure

        We take reasonable technical and organisational steps to protect your information from loss, misuse and unauthorised access — including limiting access to staff who need it and using reputable, secure service providers. If we become aware of a security compromise that affects your personal information, we will notify you and the Information Regulator as POPIA requires.

        11. Your rights

        Under POPIA, you have the right to:

           

            • ask whether we hold personal information about you and request a copy of it;

            • ask us to correct or update information that is inaccurate or out of date;

            • ask us to delete information we no longer have a lawful reason to keep;

            • object to us processing your information, including for direct marketing;

            • withdraw your consent at any time, where we rely on consent; and

            • lodge a complaint with the Information Regulator.

          To exercise any of these rights, contact our Information Officer using the details in section 2. We may need to verify your identity before responding. Requests for access are handled in line with our PAIA Manual, available on request.

          If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You can also complain to the Information Regulator (South Africa) via www.inforegulator.org.za.

          12. Children

          Obscura is a licensed venue for adults. Our website and services are not aimed at people under 18, and we do not knowingly collect personal information from children. If you believe a child has given us their information, please contact us and we will delete it.

          13. Changes to this policy

          We may update this policy from time to time. The latest version will always be on our website with its “last updated” date.

          14. Contact us

          For any privacy questions, email hello@obscurabar.co.za or call 010 500 7573.