This privacy policy explains how Triangle Carrot Ltd ("we", "us") handles information when you use the GetTableService app or the GetTableService for Host app (together, "the apps"). We are the data controller for the information described here.
Information we collect when you order
Customers don't need an account. When you place an order, we collect:
- your name and email address, so the venue can identify your order and you can get a receipt;
- your table number and any notes you add to the order;
- the items you order, the total, any tip, and the venue you ordered from;
- the payment status and a Stripe payment reference.
This information is stored on our servers and shared with the venue you order from, so it can prepare and serve your order.
Payments
Card payments are processed by Stripe. You enter card details on a Stripe payment page, and we never see or store your full card number. Stripe handles your payment information under its own privacy policy and emails your receipt.
Information we collect from venue staff
When a venue signs up in the Host app, we collect the business name and address, a contact phone number, and the name, email address and password of the account owner. Passwords are stored in hashed form. We use this information to run the venue's account, display the venue in the customer app, and deliver its orders.
Information stored on your device
The customer app saves the venue you last selected and your current order on your device, so you can pick up where you left off. This data isn't sent to us, and uninstalling the app deletes it.
How we use information
We use the information above only to take, pay for and deliver orders, and to run venue accounts.
We don't sell your information, use it for advertising, or use analytics or tracking services.
Who we share information with
- The venue you order from, which sees your order details.
- Stripe, which processes card payments.
- Our hosting provider, which stores the data on our behalf.
Legal basis (UK and EEA users)
We process order information because it's needed to perform the contract when you place an order. We process venue account information to provide the service the venue signed up for.
Data retention
We keep order records for as long as the venue needs them to run its business and meet its accounting obligations, and venue account information for as long as the account is open. Unpaid, incomplete orders are deleted automatically after a short time.
Your choices and rights
You can ask us for a copy of your information, or ask us to correct or delete it, by emailing the address below. Venue owners can also ask us to close their account and delete its data.
If you're in the UK or EEA, you also have the right to complain to your local data protection authority. In the UK, that's the Information Commissioner's Office (ICO).
Children
The apps aren't directed at children, and we don't knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we'll delete it.
Security
Information is sent to our servers over encrypted (HTTPS) connections. No system is completely secure, but we limit what we collect and who can access it.
Changes to this policy
We may update this policy from time to time, for example when the apps change. Any changes will be posted on this page with a new "Last updated" date.