Scope & Controller Identity
This Privacy Policy applies to the services, applications, websites, and APIs operated by TableGreet LLC ("TableGreet", "we", "us") for venues and dining guests across the United Arab Emirates ("UAE"), governed by UAE Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data.
TableGreet LLC — UAE Data Protection Operations
Email: privacy@tablegreet.com
Data Protection Officer: dpo@tablegreet.com
Information We Process
We process restaurant profile data, administrative credentials, subscription records, and technical telemetry in strict adherence to data minimisation and purpose limitation principles.
Guest & Diner Data Notice
When dining guests scan QR codes in the UAE, we collect minimal technical telemetry without building individual behavioral profiles. For complete disclosures on tableside ordering, waiter calls, reservations, and loyalty points, please see our dedicated Diner Privacy Policy (Section 08) below.
Lawful Bases for Processing (UAE Law)
- Performance of Contract: Facilitating cloud menu hosting, tableside ordering, and operational synchronization.
- Consent: Enrollment in optional loyalty rewards programs or promotional newsletters.
- Legitimate Interests: Protecting platform cybersecurity, mitigating DDoS attacks, and detecting QR sticker quishing.
- Legal Obligations: Compliance with UAE commercial laws and tax regulations.
Cybersecurity & Encryption Standards
We implement stringent technical and organizational controls, including TLS 1.3 protocol encryption, AES-256 database encryption, strict Row Level Security (RLS) tenant isolation, and automated vulnerability scanning.
Your Statutory Rights (UAE Federal Decree-Law No. 45)
Right to Access
Request information about personal data processed and obtain copies.
Right to Correction
Request updating or correction of inaccurate personal data.
Right to Erasure
Request deletion of personal data when no longer required.
Right to Restrict / Object
Object to automated processing or request processing restrictions.
To exercise rights, contact our privacy team at privacy@tablegreet.com.
Cross-Border Data Transfers
Where personal data is transferred across borders, transfers comply with Chapter 5 of UAE Federal Decree-Law No. 45 of 2021 and international standard contractual safeguards.
Supervisory Authority & Escalations
Data subjects may escalate unresolved privacy concerns to the UAE Data Office established under Federal Decree-Law No. 44 of 2021.
Diner Privacy Policy (United Arab Emirates)
A. Scope & Controller Responsibilities
This section governs personal data of restaurant guests ("Diners") interacting with TableGreet digital menus in the UAE. TableGreet acts as a data processor for on-premise tableside orders and waiter calls on behalf of the venue, and as an independent data controller for platform security, quishing prevention, and direct support requests.
B. Data Collected from Diners
- Menu Browsing: Coarse country-level IP geolocation, browser language, device model. Zero ad profiling.
- Tableside Orders: Assigned table number, selected dishes, custom notes, ephemeral session token. Local storage session tokens automatically purge after 12 hours.
- Reservations & Loyalty: Guest name and phone number voluntarily provided for table bookings or loyalty points.
C. Privacy Rights & Contacts
Diners in the UAE enjoy statutory rights of access, correction, and erasure under UAE Federal Decree-Law No. 45. Inquiries may be directed to privacy@tablegreet.com.