Mulberry Privacy Policy
Powered by Kentro Systems
Last updated: October 2026
1. Introduction & Our Role
Welcome to Mulberry, a restaurant reservation and management platform built and powered by Systèmes Kentro Inc. ("Kentro Systems"), a Quebec-based technology company.
When you book a table through Mulberry, Kentro Systems acts strictly as a third-party technology service provider. The restaurant you are booking with is the primary data controller responsible for your personal information. We process this data on their behalf under a strict service agreement to facilitate your dining experience.
Our Commitment to Transparent Pricing: Mulberry is entirely free for diners to use. We do not charge booking fees, we do not require reservation deposits, and we do not collect or process your credit card or payment information.
2. Data Collection & Usage
To successfully secure your reservation and provide the restaurant with the details they need to host you, we collect a limited amount of personal information.
What We Collect:
- Contact Details: First and last name, phone number, and email address.
- Reservation Data: Date, time, party size, and your visit history with the specific restaurant.
- Preferences: Special requests, dietary notes, or seating preferences you voluntarily provide.
- System Recordings: Call recordings (only if you interact with our AI voice reservation system).
Why We Collect It:
- Reservation Management: To process, confirm, and manage your table booking on behalf of the restaurant.
- Service Delivery: To build a secure customer history for the restaurant, allowing them to personalize your future visits.
- Quality Assurance: To improve the Mulberry platform and maintain high service standards.
We never sell your personal information to any third party, nor do we share it with advertising networks or data brokers.
3. Data Sharing & Retention
We only share your data with the necessary parties involved in fulfilling your reservation. Unlike other platforms, we do not share your information with outside business partners for marketing purposes.
Who We Share It With:
- The Restaurant Operator: Your information is securely shared with the restaurant you booked so they can prepare for your visit and manage their floor plan.
- Retell AI: Our secure telephony service provider. Data is only shared here if you utilize our voice AI systems to book via phone, strictly for call processing and recording storage.
How Long We Keep It:
- Reservation and Contact Data: Retained for a standard period of 24 months.
- Call and Session Recordings: Retained in accordance with Retell AI's standard retention policy (typically 90 days).
- After the retention period, all data is securely and permanently deleted.
4. Security & International Transfers
All personal data is transmitted using encrypted connections (HTTPS/TLS). Our service providers maintain industry-standard security, including SOC2 compliance, and we conduct regular security reviews. While Kentro Systems is based in Quebec, Canada, data may be processed in Canada, the United States, or other countries where our trusted service providers operate. We implement appropriate legal safeguards, including standard contractual clauses, for any required cross-border data transfers.
5. Marketing and Promotional Communications
When making a reservation, you may be given the option to consent to receive marketing and promotional communications (such as emails and SMS text messages) from the restaurant.
- Restaurant Communications: If you opt-in, your contact information will be used by the restaurant to send you their own promotional offers, news, or updates.
- Kentro's Role: Kentro Systems strictly facilitates the collection of this consent on behalf of the restaurant. We will never use your contact information to send you our own marketing or promotional materials.
- Opting Out: You may withdraw your consent at any time. You can stop receiving these messages by clicking the "unsubscribe" link at the bottom of the restaurant's emails or by replying "STOP" to their text messages.
6. Your Privacy Rights & Contact
We respect your privacy rights under all applicable laws, regardless of your location. Our services are not directed at children under 13 (or 16 in the EU), and we do not knowingly collect personal information from minors.
You have the right to access, correct, or request the deletion of your personal information, as well as the right to withdraw consent at any time.
- Quebec Residents (Law 25): You have the right to know what information we hold, access it, correct inaccuracies, request deletion, withdraw consent, and be informed of data breaches. Complaints can be lodged with the CAI (cai.gouv.qc.ca).
- Canadian Residents (PIPEDA): You may access your data, challenge its accuracy, and withdraw consent. Complaints can be directed to the OPC (priv.gc.ca).
- California Residents (CCPA): You have the right to know what is collected, delete data, and opt-out of sales (we do not sell data), entirely free from discrimination.
- European & UK Residents (GDPR): You possess the right to access, rectification, erasure ("right to be forgotten"), restricted processing, data portability, and objection. Processing is based on legitimate interest and contract performance.
To exercise any of your privacy rights, or if you have questions regarding this policy, please contact us. We respond to all requests within 30 days.
Systèmes Kentro Inc.
Quebec, Canada
General Inquiries: info@kentroflow.io
