Legal

Privacy policy

Draft for review. This is not legal advice. Items in [square brackets] must be completed, and the whole document reviewed by a qualified adviser, before launch.

Roles

For guest data collected at a venue (orders, loyalty card, feedback), the venue is the controller and TableFlow acts as its processor. For venue accounts and enquiries to us, TableFlow ([legal entity]) is the controller.

What guests share

Ordering: no account needed. We store the table, items, notes and totals. A random cookie keeps your session; it contains no personal details.
Loyalty card (optional): first name, and an email address only if you choose to give one, with your consent.
Feedback: anonymous; your table number is included only if you tick the box.
Games: scores appear on the leaderboard by table number only.
Online payments (when enabled): card details go directly to Stripe. We never see or store them.

Venue accounts

Staff names, emails and roles, venue details, menus and order history, used to provide the service and support.

Processors

[Confirm before launch:] Supabase (database and authentication, region [EU/UK]), Vercel (hosting), Stripe (payments), Resend (email), Sentry (error monitoring, if enabled).

Retention

[Draft:] order records are kept for [6 years] for accounting; loyalty cards until the guest or venue deletes them or after [24 months] of inactivity; feedback for [24 months]; security logs for [12 months].

Your rights

You can ask to access, correct or delete your data, or object to processing, by using our contact form. You can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

See our cookie notice. We use no advertising or tracking cookies.