Privacy Policy
Last updated: May 2026
1. Who we are
TableSewa ("we", "us", "our") operates the TableSewa platform at tablesewa.com — a QR-code ordering and payment service for hospitality venues in the UK. If you have any questions about this policy, contact us at contact@tablesewa.com.
2. What data we collect
Restaurant owners (subscribers):
- Name and email address (used to create your account)
- Restaurant name, brand colour, and logo
- Billing information processed by Stripe (we never see or store your full card details)
- Menu data, table configuration, and order history
Customers (diners):
- Email address — only if you voluntarily enter it to receive a receipt
- Order details (items ordered, table number, special notes)
- Payment data processed by Stripe (we never store card details)
3. How we use your data
- To provide and operate the TableSewa service
- To process payments securely through Stripe
- To send transactional emails (account creation, password resets, payment receipts)
- To display orders on kitchen and reception screens in real time
- To provide restaurant owners with order history and revenue reporting
- To contact you about your account or service updates (no marketing without consent)
4. Legal basis for processing (UK GDPR)
- Contract performance — processing your data is necessary to deliver the service you've subscribed to
- Legitimate interests — operating and improving the platform, preventing fraud
- Legal obligation — retaining financial records as required by law
5. Who we share data with
We use a small number of trusted third-party services to operate the platform:
- Supabase — our database and authentication provider. Data is stored on servers in the EU.
- Stripe — payment processing. Stripe is PCI-DSS compliant and handles all card data. See Stripe's privacy policy. Restaurant owners using TableSewa connect their own Stripe account via Stripe Connect; we can view their account status, transaction volume, and balance for platform operations and support, but cannot move their funds or change their bank details.
- Vercel — hosting and content delivery. Our application runs on Vercel's infrastructure.
- Resend — transactional email delivery (receipts, password resets).
We do not sell your data to third parties. We do not use your data for advertising.
6. Cookies
We use only essential cookies necessary for the service to function — specifically, authentication session cookies set by Supabase when you log in. We do not use analytics, advertising, or tracking cookies.
7. How long we keep your data
- Account data — kept for as long as your account is active. Deleted within 30 days of account closure on request.
- Order data — retained for up to 2 years for reporting purposes, then deleted.
- Financial records — kept for 7 years as required by UK tax law.
8. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data where there is no legal obligation to retain it
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, email us at contact@tablesewa.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. Data security
We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), secure database access controls, and using PCI-compliant services for payment processing. No method of transmission over the internet is 100% secure, but we follow industry best practices.
10. Changes to this policy
We may update this policy from time to time. We will notify subscribers of significant changes by email. The date at the top of this page shows when it was last updated.
11. Contact
For any privacy-related questions or requests, contact us at contact@tablesewa.com.