Privacy notice

Last updated 30 June 2026

TableTango is a reservation service for independent UK restaurants, operated by TableTango Ltd, a company registered in England & Wales (company no. 17287615) whose registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. For the personal data we control — your account details and any enquiries you send us — TableTango Ltd is the data controller. This page explains, in plain English, what personal information passes through TableTango, why, and what your rights are. Questions or requests: hello@tabletango.co.uk.

The short version

• We collect what a booking needs — your name, a way to reach you (a mobile number and/or an email address), party size, date and time — and use it to make, manage and remind you about that booking. Nothing else.
• We never sell your personal data, and TableTango never uses it to market to you. The only message a restaurant may send beyond your booking is an optional post-visit review request — and that always includes a one-tap opt-out.
• We set no advertising or tracking cookies of our own — only essential storage for things like restaurant logins. Booking pages can show a Google map, but it only loads — and only then connects to Google or lets Google set its own cookies — if you tap "Show map" (details below).

What we collect, and why

• When you book a table — your name, a mobile number and/or an email address, party size, date and time, and any notes you add (like "birthday" or dietary needs). We need at least one way to reach you about the booking: an email address is the default channel (for your confirmation and reminder), and where the restaurant has text messages switched on you may also get those on a mobile number — you can always add both. Used to create and manage the reservation, assign your table, and send your confirmation and a reminder. Legal basis: taking steps you've asked for (contract), and the restaurant's legitimate interest in reducing no-shows.
• When you chat with the booking assistant — your messages are processed in real time by our AI provider (Anthropic's Claude) so the assistant can understand and respond. Conversations are not used to train AI models, and we don't keep chat transcripts on our servers after the conversation.
• When a restaurant signs up — the owner's email address and login, used to run their dashboard. Legal basis: contract.
• Text messages (where the restaurant has text messages switched on) — the number, message text and delivery status of each text we send (confirmation, reminder, or post-visit review request) are logged so the restaurant can see what was sent.
• When you email us — we use your details to reply. Legal basis: legitimate interests.
• Security & abuse prevention — when you use a booking page we briefly process your device's IP address to rate-limit requests and prevent abuse and fraud. Legal basis: legitimate interests (keeping the service secure and available).

Who helps us run TableTango

Like nearly every online service, we use a small number of specialist providers, each handling only what their job requires: Supabase (our booking database, hosted in London, UK), Netlify (website hosting), Anthropic (AI chat processing), The SMS Works (UK-based, sending text messages), Zoho Mail / ZeptoMail (EU-hosted — our mailbox, and the Zoho service that sends your booking confirmations and account emails), Stripe (payment processing — our subscription billing, and, where a restaurant turns it on, the optional money features: holding a card for No-show Shield, and collecting and settling deposits, prepayments and booking add-ons, with the restaurant as merchant of record on its own Stripe account), and Bouncer (email-deliverability checks for our own outreach to restaurants). Where a provider processes data outside the UK (for example in the United States), the transfer is covered by UK-approved safeguards such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

Restaurant booking pages show a Google Maps view of the restaurant's location. When the map loads, your browser connects to Google, which receives your IP address and may set its own cookies under Google's privacy policy. We don't send Google anything about you or your booking — the map only contains the restaurant's name and address. The “Get directions” link is an ordinary link that doesn't contact Google until you click it.

How long we keep things

We don't keep personal booking data forever. A booking is kept while the restaurant uses TableTango so it has an accurate history, but 24 months after the booking date we automatically anonymise the personal details (name, phone, email, notes) — the restaurant keeps the anonymous record for its statistics, but the personal information is removed. Text and email logs, and unused waitlist and feedback records, are automatically deleted after 24 months. Everything is also deleted on request or when the restaurant leaves, and account details are kept until the account closes. Our demo restaurant's data is reset periodically.

Booked through a restaurant?

Your rights

UK law gives you rights over your personal data: to ask for a copy, have it corrected or deleted, object to or restrict how it's used, and ask for it in a portable format. For the data TableTango controls — your account details and any enquiries you send us — email hello@tabletango.co.uk and we'll respond within a month. For a booking you made at a restaurant, that restaurant is the controller of your data, so please contact them — though you're welcome to email us too and we'll pass your request on and help them honour it. If you're unhappy with how we've handled something, you can complain to the UK's regulator, the Information Commissioner's Office, at ico.org.uk.

Changes

If this notice changes meaningfully, we'll update the date at the top and, for significant changes, say so on the website.