Bookings, menus, online ordering, search. Written by the people building the product, between services.
Continuing to let a sub-standard commercial building has been unlawful since April 2023 — the penalty is the landlord's, but the lease can send the cost to the tenant.
Statutory interest on a late invoice is 11.75% today, plus a fixed sum of up to £100 — and the clause said to cancel it is void unless what replaces it is a substantial remedy.
A new Chapter of ITEPA 2003 can hand a restaurant the PAYE and NIC bill for staff it never employed — but only on three chain shapes, and the ordinary UK agency is not one of them.
In England the 8 °C rule may not govern a hot courier delivery at all — but which branch applies turns on an undefined term, and reading it wrong inverts the risk.
England and Wales scrapped the five-employee test in 2023 — record the whole assessment or risk a penalty. In Scotland and Northern Ireland, any licensed premises is caught.
A fingerprint clocking-in terminal turns payroll admin into special category data. Consent can make it lawful — but only where refusing costs a member of staff nothing.
A regulator can now disable a restaurant's website and impose a penalty without a court case, while the diner's own right sits on a saving with a condition, not a date.
The posting duty on a hygiene notice stops at the door; whether it reaches the ordering page behind it is untested, and getting it wrong risks a second offence.
Repackaging draught beer for takeaway leaves an unpaid duty difference and a forfeiture risk an ordinary pint at the bar never triggers — and the rate has moved twice since 2023.
A DNS record left pointing at a cancelled supplier is, on how shared platforms generally work, claimable by a stranger — and the security risk stays with the restaurant.
A loyalty form's date-of-birth field is the easy part — sending the birthday message afterwards is where restaurants risk a live PECR breach.
A vendor's ransomware notice can start the restaurant's own 72-hour clock and its own liability risk — being hacked by proxy is not, on its own, a defence.
