Privacy Policy

1. Introduction

AtTable (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our QR ordering platform.

AtTable is a product of SAVV8 LIMITED, a company registered in England and Wales. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

For Restaurant Owners and Staff

• Account information (name, email address, phone number)
• Restaurant details (name, address, business information)
• Payment and billing information
• Menu content you upload
• Usage data and analytics

For Restaurant Guests

• Session data (table number, order history during visit)
• Dietary preferences (if you choose to set them)
• Device information and browser type
• Interaction data (menu views, cart activity)

Note: Guests can use AtTable without creating an account. We do not require personal identification information from guests to place orders.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process orders and transactions
• Provide analytics and insights to restaurant owners
• Improve our platform and develop new features
• Communicate with you about your account or service updates
• Ensure the security of our platform
• Comply with legal obligations

4. Legal Basis for Processing

We process personal data on the following legal bases:

• Contract: To fulfill our service agreement with restaurant owners
• Legitimate Interest: To improve our services and provide analytics
• Consent: Where you have given explicit consent
• Legal Obligation: To comply with applicable laws

5. Data Sharing

We do not sell your personal information. We may share data with:

• Restaurant partners: Order and session data is shared with the restaurant you're ordering from
• Service providers: Trusted third parties that help us operate our platform (hosting, payment processing)
• Legal requirements: When required by law or to protect our rights

6. Data Retention

We retain personal data for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• Restaurant accounts: Data is retained while the account is active and for 7 years after closure for legal/tax purposes
• Guest session data: Order data is retained by restaurants according to their policies; anonymized analytics may be retained longer
• Analytics data: Aggregated, anonymized data may be retained indefinitely

7. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (“right to be forgotten”)
• Portability: Request transfer of your data
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at privacy@attable.io or through your account settings.

8. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.

9. Cookies

We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how our service is used. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

10. International Transfers

Your data may be processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@attable.io
• Address: SAVV8 LIMITED, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.