Privacy Policy
Live Table, ABN 53 913 707 268, based in Victoria, Australia ("we", "us"), provides real-time guest feedback for hospitality venues. This policy explains what information we collect, why, how we protect it, and the choices you have. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It applies to venue operators and their staff, their guests, and visitors to our website; how venues may use guest feedback is also governed by our Terms of Service.
1. The short version
- Guest feedback is anonymous. We do not ask guests for — or store — names, email addresses or phone numbers.
- Venue data is stored in Australia, encrypted in transit and at rest.
- Card details are handled by Stripe; we never see or store card numbers.
- We don't sell personal information. Ever.
- We rely on a few trusted providers (Stripe, Cloudflare, Google) to run the service; some may process limited data overseas.
2. What we collect from venue account holders
- Account details — your email address, used for login and service communications. We do not collect a personal name; your venue's name (below) serves as your account's display name.
- Venue details — venue name, address, trading hours, and your floor and table layout.
- Billing — your subscription is processed by Stripe. Any billing details you enter — your card, billing name and address, and an optional business/tax number (ABN) — are entered into and held by Stripe, not by us; we hold only your Stripe customer reference and subscription status.
- Security records — the IP address and timestamp at signup and acceptance of our Terms, kept as a fraud-prevention evidence trail.
- Anti-bot check — when you create an account we use Cloudflare Turnstile to confirm the request is genuine and not an automated script. Cloudflare receives your IP address and limited browser signals for this check.
3. What we collect from guests
- A like or dislike rating, an optional reason (for example wait time or food), and an optional short note — linked to a table and time, never to a person.
- We do not collect guest names, emails, phone numbers, accounts or precise locations. Guests do not need to install anything or sign in.
- A guest's IP address is used transiently for abuse prevention and is not stored with feedback.
- Guest notes are free text. We do not seek sensitive information (such as health or biometric details); notes are shown to venue staff with automated profanity masking.
- Because feedback is anonymous, we do not knowingly collect personal information from children through it. Live Table is a tool for businesses and is not directed at children.
4. What we collect through this website
- Contact form — your name, email, an optional venue name, and your message, used solely to reply to you.
- Technical logs — standard web logs (IP address, user agent, request time) for security and reliability.
- Some page assets are served by third-party content networks (Google Fonts and jsDelivr), which receive standard web request data (such as your IP address and browser type) when the page loads.
5. How we use information
- To operate the Service: showing live feedback to your team, powering analytics, processing subscriptions.
- To communicate with you: verification codes, receipts, service updates, price-change notices, and replies to your enquiries.
- To keep the platform safe and reliable: anti-bot verification, fraud prevention, abuse prevention, and maintaining the security and reliability of the Service.
- To improve Live Table, using anonymised, aggregated data from which no venue, guest or other business can be identified.
These are service and transactional messages needed to run your account — they are not promotional marketing. We do not send marketing email at this time; if that ever changes, every marketing message will include an easy way to unsubscribe, which we will honour.
6. Storage and security
Your personal information is stored in Australia and protected with reasonable technical and organisational measures — including encryption in transit and at rest, restricted and logged access, and a least-privilege, data-minimisation approach (the most privacy-protective data is the data we never collect). We keep secure backups for disaster recovery for a limited period; when information is deleted, it is removed from those backups in the ordinary course.
7. How long we keep things
- Guest feedback — automatically deleted after approximately 90 days. The analytics available to you in the app cover roughly the most recent 90 days; we keep only aggregated, non-identifying figures (from which no guest can be identified) for our own reporting and to improve the Service.
- Venue account data — kept for the life of your account. When you close your account, your access ends immediately and your venue's data is deleted; we retain your login email in a disabled state to stop someone re-registering with it (you can ask us to erase this). If an account is suspended (for example for non-payment), its data is retained for 30 days so it can be reactivated, then permanently deleted.
- Signup security records — kept for 12 months.
- Contact form messages — kept in our mailbox for as long as needed to handle your enquiry.
8. Who we share information with
We use a small number of trusted service providers to run Live Table, and we share only what each needs to do its job. We do not sell or rent personal information.
- Amazon Web Services — hosting and infrastructure, in Australia.
- Stripe — payment processing and billing; may process payment data overseas, including in the United States.
- Cloudflare — bot and abuse protection on our sign-up; receives limited request data (such as your IP address) and may process it overseas, including in the United States.
- Google — address lookup and fonts; may receive limited data and process it overseas, including in the United States.
- Otherwise, we disclose personal information only where required by law or to protect the safety and integrity of the Service.
Overseas disclosure. In line with Australian Privacy Principle 8, Stripe, Cloudflare and Google may process limited personal information outside Australia, primarily in the United States. Your venue and guest data are hosted in Australia.
9. Cookies and local storage
The Live Table app uses essential browser storage to keep you signed in and remember your preferences. Our anti-bot provider, Cloudflare Turnstile, may set a cookie or use local storage on the signup page to tell humans from automated scripts. We do not use advertising or cross-site tracking cookies, and this marketing site sets no tracking cookies.
10. Access, correction and deletion
You can view and update your account and venue details in the app at any time, and you can request access to the personal information we hold about you by emailing us. Closing your account from your account page deletes your venue's data immediately (see "How long we keep things" above). For anything else — including a request to access, correct or erase personal information — email hello@livetable.com.au. We respond to access and correction requests within a reasonable time, and there is no charge for routine requests.
11. Data breaches
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) without undue delay, in accordance with the Notifiable Data Breaches scheme.
12. Complaints
If you have a privacy concern, contact us first at hello@livetable.com.au — we take these seriously and will respond promptly. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au.
13. Changes to this policy
We may update this policy from time to time. It is versioned and dated; material changes will be notified to account holders by email or in the app.
14. Contact
Privacy questions? Email hello@livetable.com.au and we will reply.