Last updated 10 September 2026
1. Data controller
Soft Intel Partners Limited (company number 16818970), 128 City Road, London, EC1V 2NX, United Kingdom, is the controller of personal data processed through Tavolo. Contact: support@tavolo.world, +39 344 409 2002.
2. What we collect
- Account data — name, email address, phone number, role, business name, address and business details you enter.
- Venue content — opening hours, menu link, photo and notes you upload.
- Referral data — bookings you create or receive: guest first name, party size, requested time, status and reward amount.
- Location — referrers may share device location to sort venues by distance. It is used in your browser to calculate distance and is not stored as a location history.
- Payment data — identifiers from Stripe (customer and connected account IDs), charge and payout records. Card numbers and bank details are held by Stripe, not by us.
- Technical data — sign-in codes, device push tokens, and basic error and usage logs needed to run the service securely.
3. Why we use it and our legal basis
- To create and manage your account and match referrals to venues — performance of a contract.
- To process charges, payouts and invoices — performance of a contract and legal obligation.
- To send transactional emails and notifications about bookings, charges and payouts — performance of a contract.
- To prevent fraud, abuse and non-reporting — legitimate interests.
- To keep accounting and tax records — legal obligation.
4. Who we share it with
- Stripe Payments Europe / Stripe, Inc. — payments, payouts and identity verification.
- Supabase — hosted database, authentication and file storage.
- Google Firebase — push notifications.
- Our email delivery provider — transactional email.
- Authorities, where we are legally required to disclose.
We never sell personal data or use it for third-party advertising.
5. International transfers
Some providers process data outside the UK/EEA. Where that happens, transfers rely on Standard Contractual Clauses or an equivalent approved safeguard.
6. How long we keep it
Account and referral records are kept while your account is active and for up to seven years after the last transaction, to satisfy accounting, tax and dispute obligations. Sign-in codes expire within minutes. Push tokens are deleted when you disable notifications or the device stops responding.
7. Your rights
Under the UK GDPR and EU GDPR you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Email support@tavolo.world and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or the Garante per la protezione dei dati personali in Italy.
8. Cookies and storage
We use only essential cookies and local storage: keeping you signed in, remembering your language, and storing your location consent choice. We do not use advertising or third-party analytics cookies.
9. Security
Data is encrypted in transit, access is restricted per account by database-level security rules, and payment credentials are held by Stripe. If a breach affects your rights we will notify you and the relevant regulator as required by law.