What we hold, and what we never show

Identity documents, dates of birth, legal names, phone numbers, email addresses, home areas, emergency contacts and social accounts are stored apart from profiles, in records that the discovery and profile pages do not read at all. They are not withheld by a display rule that could be misconfigured — they are not loaded.

Member profiles, booking pages and vouchers are excluded from search engines by both robots.txt and a X-Robots-Tag: noindex response header. This applies to every profile regardless of the visibility a member chooses, so even a public profile stays off Google.

New profiles start private. A member can change this at any time.

Private

Only you and approved TableForTwo staff can see your profile.

Members only

Only verified customers who are signed in can view your profile.

Public

Signed-out visitors to TableForTwo can view your profile. Search engines are still blocked.

Member photographs are watermarked and served from secure storage. Profile views are logged — who looked, and when — so that a member can be told if their profile is being viewed abnormally, and so we can act on it.

Card details are collected by our payment provider and never reach TableForTwo systems. We store the transaction reference, amount, status and timestamp against your booking, and nothing more.

A partner venue sees the seating time, the party size, the experience and its inclusions, the booking reference, and one first name. They are not given your contact details, and they are not told anything about the other guest.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete your account. Deletion removes your profile, photographs and contact records. Booking and payment records are kept where financial and tax law requires it, reduced to what those obligations need.