Bookings, menus, online ordering, search. Written by the people building the product, between services.
Four or five third-party scripts nobody chose can read the card fields on a restaurant's own checkout page, and the exposure can run undetected before anything looks wrong.
Switching on a photo gallery or a guest message board can end a website's Online Safety Act exemption for the whole service, and the risk is one an owner must judge alone.
A printed table code will never be edited again, yet the address behind it can lapse, move or drift out of date, and the failure lands on a guest mid-service.
A departed booking supplier can still hold the whole guest list, and the restaurant that never instructed deletion carries the risk when a guest complains.
Two thousand addresses came off the wifi splash screen, and the Christmas send is booked. A network login is not negotiations for the sale, and the risk sits with the restaurant.
Heavy restaurant photographs are routinely blamed for the wrong metric, and a fortnight of work is spent against the wrong number. The report that settles it is field data.
A published security fix reaches a restaurant's live site only when somebody applies it, and by default that is nobody's job. The exposure lands on the restaurant either way.
A manager who serves the difficult table himself and writes nothing down may already put the restaurant in breach, and no complaint is needed before the regulator acts.
Boosting a burger post is a payment to place an advertisement. Its lawfulness turns on a headcount taken on a day the Regulations never name, and the risk sits with the payer.
The statutory duty is narrower than most restaurants fear and the document shorter, though HMRC's guidance asks for more, and the rate on each line is where the exposure sits.
Forty places are sold, one guest changes their mind, and the no-refunds line at checkout may not bind. The exposure is the term itself, and the price shown before it.
Bookings agreed in message threads can bind the restaurant, yet the only copy of what was promised walks out with the phone long before any dispute arrives.
