Privacy

What we store

• Your order. What you ordered, which table or lane, any allergy or preference note you typed, and the amount paid. The venue needs this to bring you the right thing, and keeps it in their books afterwards.
• Your name and phone number on an order or booking, so staff can find you.
• Your email address, if you give one — for the receipt, the booking confirmation, and to sign in.
• A notification token, if you allow notifications. It identifies the app on your phone, not you.

What we don’t store

Your card details. They go straight from your phone to Stripe, our payment processor, and never reach our systems. We keep only Stripe’s reference for the payment, so a refund is possible.

There is no password to store either. Signing in is a six-digit code emailed to you, which proves you own the inbox and is then thrown away.

Who else sees it

• Safari & Co — the staff serving you, on their till.
• TableSense handles the venue’s activity bookings. When you book a lane or a booth, your name, email, phone and any note are sent to them, because they hold the venue’s diary.
• Stripe takes the payment.
• Resend sends the emails.
• Apple and Google deliver notifications to your phone.

Nobody else. We don’t sell it, and there is no advertising or third-party tracking in this app.

Notifications

Only if you allow them. Two kinds: a reminder the evening before a booking, which your phone schedules by itself and which never leaves the device, and occasional messages from the venue. Turning them off in your phone’s settings stops both.

How long we keep it

Receipts are kept for six years, which is what HMRC requires of any business. What’s on your phone lasts until you clear it, and goes when the app does.

There is no account to delete

The app has no sign-in. The copy of your name, email and phone number that fills in your next food and drink order lives on your own phone — we don’t hold it, and there is no account of yours for us to look up. Activity bookings are made directly with TableSense, who email your confirmation.

That is separate from what a booking or an order itself creates: a booking goes to TableSense because they hold the diary, and an order goes on the venue’s receipt, which is kept for the six years above.

To clear it: My bookings → Forget me on this phone. Because it never left the handset, that really is the end of it — there’s nothing to request from us and nothing to take our word for.

Two things are not on your phone, and it’s worth being straight about them. Past receipts stay in the venue’s books for the six years above, because HMRC requires it. And activity bookings live in the venue’s TableSense diary rather than ours, so ask Safari & Co directly to remove those.

Your rights

Under UK GDPR you can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Contact Safari & Co on 01382 000000, who are the data controller — ServeToYou runs the system on their behalf. If you aren’t happy with the answer you can complain to the Information Commissioner’s Office at ico.org.uk.