Bookings, menus, online ordering, search. Written by the people building the product, between services.
The documented item has no allergen field, no ingredient list, no description. The line carrying the most risk is the one the till was never built to hand over.
The documented events are order events; nothing announces a menu change. A site told to cache and not to poll serves a stale dish until somebody notices.
The paper menu said Ribeye, 10oz, £29. The website says dry-aged for twenty-eight days, and the pass has to defend a sentence nobody in the kitchen wrote when a guest disputes it.
Most restaurants have one or two tables a wheelchair user can actually be seated at, and only the longest-serving member of staff knows which. Nothing records it, so the wrong table gets given away.
A guest wall that lets one diner reply to another can move a restaurant website out of the comment exemption and into a compliance burden nobody costed into the build.
Your order screen takes a postcode and a card but never records a time the guest agreed to. When the kitchen runs ninety minutes late, the law fills that silence and your staff absorb the cost.
Immunity boosting broth read fine on a chalkboard for years. On a published menu it is a marketing communication, and the wrong wording is a breach rather than a flourish.
A regular tries to book and the form says nothing is available. Nothing was wrong with the night: a no-show flag from last winter refused her, with no human involved.
On a Friday the line goes quiet, and the card terminal sharing the socket goes with it. BT retires the analogue network by January 2027, and attached equipment may fail.
A booking from two years ago still holds a name, a phone number and an allergy note. Data kept longer than it is needed is exposure the restaurant chose to keep.
The last button on your checkout says Confirm. Regulation 14 wants an obligation to pay spelled out, and the wrong label leaves the guest not bound by the order.
A guest searches your dish and reads an answer assembled above the results, with nothing to click, leaving the restaurant dependent on a page nobody reaches.
