Your details, handled properly.

ClubTable Limited ("ClubTable", "we", "us") is a company registered in England and Wales, number 16140479, with its registered office at 16 Wiseton Road, London SW17 7EE. We are the data controller for the personal data described in this policy, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy covers our website at www.clubtable.co, our app, and the waiting list (together, "the Service"). If you have a question about your data at any point, write to privacy@clubtable.co. A person reads it.

2.1 What you give us

• The waiting list. Your name, your email address and where you live, so we know which region's list you belong on and how to reach you when your first table is set. Our waiting list terms describe the list itself.

• Your account. Your name, email address and a username; your date of birth, used only to confirm you are eighteen or over; and, if you choose, a phone number. You sign in with a link we email you — we do not store a password.

• Your profile. What you tell us about yourself so that tables can find you: what you're into, where life has you, the languages you speak, dietary needs, and anything else you choose to add. You decide how much to say.

• Your verification photo. A single photograph taken at signup, used only to confirm at the table that the person who arrives is the person who booked. See section 2.4 — it is the one piece of data we treat as biometric.

• Bookings and payments. Your seat, the table, and your payment details. Card payments are processed by Stripe; we never hold your full card number.

• After a table. A short note we ask for afterwards — what stayed with you, and whether you would sit with any of your tablemates again. Never asked at the table, never during the meal.

• Invitations. If you accept an invitation from us by email, we record the address it went to, when you accepted, and which invitation it was.

• Messages and support. Messages you send through the Service, requests for help, and replies to anything we ask you.

2.2 What we collect automatically

• Your device. Device type, operating system, browser, and identifiers your device provides.

• How you use the Service. Pages and screens you visit, features you use, and when.

• Where you are, roughly. An approximate location from your IP address. Precise location only if you grant it in your device settings, and only while you use a feature that needs it.

• Cookies and similar technologies. The few we set, and why, are in our Cookie Policy.

2.3 What we receive from others

• Sign-in providers. If you choose to sign in with Apple, Google or LinkedIn where we offer it, we receive your name, email address and, where you allow it, a profile picture.

• Restaurants. The restaurant hosting your table may tell us whether you arrived.

2.4 Your verification photo

The photograph you take at signup has one purpose: to let the restaurant confirm at the table that the person who turns up is the person who booked. ClubTable seats people who have not met, and the table needs to know each seat is taken by the right person.

Your verification photo is never shown to other diners, and is not used to choose who you sit with, for analytics, or to train machine-learning models. It is compared against the photo taken at check-in by an automated service run for us by Amazon Web Services in the European Union; no human at Amazon sees it. Access is limited to a small number of our staff, the restaurant checking in a specific booking, and our fraud-prevention systems where strictly necessary to investigate a suspected incident.

Because the photo identifies a specific person, it is biometric data under Article 9 of the UK GDPR. We process it on the basis of the explicit consent you give at signup. You can withdraw that consent at any time by closing your account; without a verification photo we cannot admit you to a table, so withdrawing consent and continuing to use the Service is not possible. We keep it while your account is active and for up to ninety days after you close it. You can replace it at any time from your settings.

Each purpose below names its lawful basis under Article 6 of the UK GDPR (and Article 9 where it applies).

• Keep your place on the list and write when your table is set. (Contract — the waiting list terms you agree to when you join.)

• Run the Service. Create your account, show you tables, take bookings, and let the people at a table reach each other where appropriate. (Contract.)

• Let tables discover you. Use what you have told us and how you use the Service to find the tables with common ground for you. (Legitimate interests — running and improving a discovery service. See section 11 on how we use software to do this.)

• Confirm you at the table. Use your verification photo as described in 2.4. (Article 9 explicit consent for the photo; contract for the check-in.)

• Take payment and keep accounts. Process payments and refunds, keep the records the law requires, and spot fraud. (Contract; legal obligation; legitimate interests.)

• Ask how it went. Send the short note after a table and use what you tell us to set better tables next time. (Legitimate interests; you can object at any time.)

• Keep in touch. Confirmations, reminders and service notices (contract); and, only where you have opted in, news from us (consent).

• Keep the Service safe. Detect abuse, enforce our terms and protect the people at our tables. (Legitimate interests; legal obligation.)

• Meet our legal obligations. Respond to lawful requests, keep required records. (Legal obligation.)

• Contract. Some processing is how we deliver what you asked for — your place on the list, your booking, your seat at the table.

• Legitimate interests. Running and improving the Service, preventing fraud, measuring aggregate use of the Service with our own cookieless analytics (you can opt out at any time at clubtable.co/privacy-choices), and telling existing members about similar things we do. We balance these against your rights and will not rely on this basis where your rights override ours.

• Consent. Things you opt into: news from us and precise location. You can withdraw consent at any time, and doing so does not affect what was lawfully done before.

• Legal obligation. Where the law requires it — keeping accounting records, for instance.

• Explicit consent (Article 9). Your verification photo, as set out in section 2.4.

• The people at your table. Once a booking is confirmed, the other confirmed diners at that table see your first name and what you have chosen to share in your profile. They never see your verification photo, your email address or your surname.

• The restaurant. The information it needs to host the table: your name, dietary needs and the booking, plus your verification photo for the check-in only.

• The services that run ClubTable. Hosting (Railway, Vercel and MongoDB Atlas), payments (Stripe), email (Postmark), images (Cloudinary), messaging (Ably), error monitoring (Sentry), analytics once you have opted in (Umami), identity checks (Amazon Web Services), and the AI services we use to find common ground between the people at a table, which receive the words you have written in your profile and never your photo. Each works for us under contract and only on our instructions.

• The law. Regulators, courts and law enforcement where we are required to, or to protect the rights, property or safety of ClubTable, our members or others.

• A new owner. If ClubTable is sold, merged or reorganized, your data may pass to the new owner under this policy.

We do not sell your personal data, and we do not share it with anyone for their own marketing.

• Waiting list. Until you join ClubTable, ask to come off the list, or two years pass without an invitation going out for your region — whichever is first.

• Your account and profile. While your account is open, then up to ninety days in backups. Your profile leaves public view the moment you close your account.

• Verification photo. Deleted within ninety days of closing your account.

• Notes after a table. While your account is open and for up to twelve months after, to improve how tables are set; deleted sooner on request.

• Bookings, payments and refunds. Up to seven years, to meet UK accounting, tax and dispute obligations.

• Messages to us. Up to two years from the last message.

Data that can no longer identify you may be kept for analysis and research.

Under the UK GDPR you can ask us to:

• Show you the personal data we hold about you.

• Correct anything inaccurate or incomplete.

• Delete your personal data.

• Restrict how we use it.

• Hand it over in a structured, machine-readable form.

• Stop processing based on legitimate interests, or any direct marketing.

• Withdraw consent wherever processing relies on it.

• Not be subject to a decision made solely by automated means that has a legal or similarly significant effect on you.

Write to privacy@clubtable.co. We answer within one month, free of charge; for a request that is clearly unfounded or repetitive we may charge a reasonable fee or decline, and we will tell you why. We may ask you to confirm who you are before we act, so that your data goes to you and no one else. Many of these choices are also in your privacy settings once you have an account.

ClubTable is a UK company. Some of the services that run ClubTable operate outside the UK — our hosting and database providers in the United States, and our identity-check service in the European Union. Where your data leaves the UK we use safeguards the law recognizes: the UK International Data Transfer Agreement, Standard Contractual Clauses approved by the Information Commissioner's Office, or transfers to countries the UK has found to offer adequate protection. Ask us at privacy@clubtable.co and we will tell you which applies to a particular provider.

We protect your data with encryption in transit and at rest for sensitive fields, access controls, and regular review of who can see what. No system is perfectly secure, and we will not pretend otherwise.

If a breach is likely to put your rights and freedoms at risk, we will tell the Information Commissioner's Office within seventy-two hours of learning of it, as Article 33 of the UK GDPR requires. If the risk to you is high, we will tell you directly, promptly and in plain English, with what you can do about it.

ClubTable is for people aged eighteen and over, and we do not knowingly collect data from anyone younger. Our floor is higher than the law's thirteen because tables happen in restaurants, among people who have not met. If you believe we hold a child's data, tell us and we will delete it.

Tables find you through software. We use our own systems and AI services to read what you have written about yourself and look for common ground with other people — a chapter of life, a passion, a way of seeing things — so that the right table forms. The AI services see the words in your profile; they never see your verification photo, your payment details or your contact details, and we do not allow them to use your data to train their models.

No decision with a legal or similarly significant effect on you is made by software alone. If you think a table was set wrongly for you, or you would like a person to look at how you were placed, write to us.

When we change this policy we update the date at the top, and where the change matters to you we tell you by email before it takes effect. If you keep using the Service after a change, that is your acceptance of it.

We set only strictly necessary cookies — the ones the Service cannot work without — so there is no cookie banner to answer. Our analytics is cookieless: it sets nothing on your device, and you can opt out at any time at clubtable.co/privacy-choices. Which cookies we set, what they do and your choices are in our Cookie Policy. The authoritative, versioned text of this policy is at clubtable.co/legal/privacy_policy.

ClubTable Limited, 16 Wiseton Road, London SW17 7EE. Company number 16140479.

Questions about your data: privacy@clubtable.co. Anything else: hello@clubtable.co.

If you are unhappy with our response, you also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We would rather hear from you first, and we will always try to put things right.