Privacy policy

What we collect

• When you enquire: your name, business name, email, phone number, current website and anything you write in the message.
• When you become a client: an account email and password (stored hashed, never in plain text), plus the content you give us for your website such as prices, menus, hours, photos and words.
• When you pay: your card details go directly to Stripe. We never see or store full card numbers. We keep the Stripe customer and subscription identifiers, your plan and its status.
• When we build a preview: publicly available information about your business from Google’s Places API, such as name, address, opening hours, rating and reviews. Reviews always keep their author’s name, as Google requires.
• Website statistics: aggregate visitor numbers, pages viewed, traffic sources and device types, through Google Analytics on client websites and Vercel Analytics on ours. We use these to report on performance, not to identify individual visitors.

Why we collect it

To answer your enquiry, build and host your website, take payment, provide your dashboard and stats, send service messages such as welcome and billing emails, and improve what we offer. We do not sell personal information, and we do not send marketing to people who have not asked for it.

Who else touches it

We use a small number of established providers to run the service: Supabase for the database and logins (hosted in Sydney), Vercel for hosting, Stripe for payments, Resend for email, and Google for maps, business listings and analytics. Each only receives what it needs to do its job. We may also disclose information where the law requires it.

Keeping it safe

Data is encrypted in transit, access to client records is restricted at the database level so one client can never see another’s information, and administrative access is limited to our team. No system is perfectly secure, but we take this seriously and design for it rather than bolt it on.

Cookies

We use essential cookies to keep you signed in to your dashboard. Analytics on our own site is aggregate and privacy-friendly. Client websites we build carry that client’s own Google Analytics, which is disclosed on their site.

Access, correction and complaints

You can ask us what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email hello@tablefront.com.au or call 0466 095 458 and we will respond within a reasonable time, usually within 30 days. If you are unhappy with how we have handled your information, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy we will update the date at the top. Material changes affecting current clients will also be emailed.