Privacy policy

This policy explains how TableDirect handles personal data. Takeaway Direct and TableDirect are operated by:

Techficient Solutions Ltd trading as TableDirect, a company registered in England and Wales (company number 16289934), registered office 128 City Road, London, EC1V 2NX. Email: brad@techficient.co.uk.

Businesses that use the service, and visitors to our websites

When you enquire about or subscribe to the service, we are the data controller for your contact details, staff logins, and the information needed to bill you. We use them to provide the service, communicate with you and meet our legal obligations (lawful bases: contract, legitimate interests and legal obligation). Your subscription payments are taken by Stripe; we receive the status of your subscription but not your full card details. We keep account data for as long as you are a customer and for up to 6 years afterwards for accounting purposes.

If you request a demo, we keep the details you give us, and which of our adverts or pages brought you to us, to arrange the demo and follow up (lawful basis: legitimate interests). If you don't become a customer we delete them within 12 months. If you accept advertising cookies on our marketing pages, Google and Meta receive information about your visit as described in our cookie policy.

People who order from businesses using the service

If you order through a takeaway's ordering site, or by scanning the QR code on a table, that business is the data controller for your order details. We process your data on their behalf as a data processor to take and manage your order, show its status, send order updates, and — only if you opt in — let the business send you marketing. See the privacy notice on the business's ordering site for details.

Card payments are made directly to the business through Stripe. Stripe processes your card details as an independent controller under its own privacy policy (stripe.com/gb/privacy); they are never stored on our systems.

Sub-processors

• Lovable and Supabase — website hosting, database and sign-in (UK/EU, or US with appropriate safeguards such as the UK International Data Transfer Addendum)
• Stripe — card payments to businesses, payouts and our subscription billing
• Resend — order and account emails
• Twilio — order text messages, where the business has switched them on
• Microsoft 365 — our own email and support correspondence

Your rights

You have rights to access, correct, delete, restrict or object to use of your personal data, and to data portability. Contact us at brad@techficient.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).