FOR EVERYONE
Last updated 22 August 2026
MyTabler LTD is the data controller for personal data processed through myTabler. We are registered with the Data Protection Commission of Ghana. - Should we be registered ??
This policy is written against the Data Protection Act, 2012 (Act 843).
Our Data Protection Supervisor is reachable at info.mytabler@gmail.com.
1. Who this covers
This policy covers guests using the app, operator staff using the admin panel, and anyone who contacts us.
Operators are separate data controllers for the guest data they receive through the platform. What they may and may not do with it is set out in section 6.
2. What we collect
When you create an account: your name, mobile number, email address, and password (stored hashed, never in readable form).
When you book: the venue, date, time, party size, any package or ticket chosen, special requests you type in, and your payment reference.
When you attend: arrival and no-show records, and the table you were seated at.
When you use the app: device type, operating system, app version, IP address, pages viewed, and crash and diagnostic logs.
When you give feedback: your review and rating.
When you contact support: whatever you send us, and our reply.
We do not ask for and do not want special category data: health, religion, political views, and so on. Please don’t type it into free-text fields.
3. Payment information
We do not store your full card number. Payments are processed by Paystack, a licensed payment service provider. We hold a payment reference and the outcome of the transaction, which is what we need to settle the money and handle refunds.
4. Why we process it, and on what basis
WHAT FOR
BASIS UNDER ACT 843
Creating and running your account
Performance of our agreement with you
Confirming and delivering your bookings
Performance of our agreement with you
Taking payment and issuing refunds
Performance of our agreement with you
Settling money to operators
Legitimate interest in running the platform
Preventing fraud and keeping the platform secure
Legitimate interest, and legal obligation
Improving the product using aggregated data
Legitimate interest
Marketing from myTabler
Your consent, withdrawable at any time
Keeping tax and accounting records
Legal obligation
5. Guest IDs, how operators see you
When you book, the operator does not receive your full name as a matter of course.
You appear to them by a Guest ID, a pseudonymous identifier, along with the details they need to seat and serve you: party size, arrival time, your booking, and anything you flagged in a special request.
Operators are contractually barred from trying to re-identify you from a Guest ID.
This is deliberate. It gets you a table without handing over your identity to every business you visit.
6. What operators may and may not do with your data
An operator may use what they receive only to confirm and deliver your booking, contact you about that booking, manage arrival and seating, handle a complaint, and comply with the law.
An operator may not sell, rent or share it, upload it to a marketing tool, export it to a personal device or account, or add you to a mailing list on the basis of a booking alone.
Export of guest personal data is switched off in the platform for an operator’s first twelve months. Where marketing consent is required, the operator has to obtain it separately from you; they cannot rely on the consent you gave us.
7. Who else sees your data
We use sub-processors to run the platform:
•
Payment processing, Paystack
•
Cloud hosting, Amazon Web Services
•
Messaging, SMS and email delivery providers
•
Analytics and crash reporting, product performance only
Each is bound by data protection obligations no weaker than ours, and we remain responsible for what they do.
We also disclose data where the law requires it, or to establish or defend a legal claim.
We do not sell personal data. We never have and it isn’t part of the business model.
8. Data leaving Ghana
Some of our sub-processors host data outside Ghana. Where that happens we comply with sections 18 and 47 of Act 843, either by confirming the destination provides an adequate level of protection or by putting appropriate contractual safeguards in place.
9. How long we keep it
•
Account data; while your account is open, then 12 months.
•
Booking and settlement records, six years, for tax and accounting.
•
Arrival and no-show history, 24 months.
•
Support conversations, 24 months.
•
Marketing consent records, for as long as the consent stands, plus 12 months.
•
Aggregated, anonymised data, indefinitely. It is no longer personal data.
10. Security
Encryption in transit and at rest. Role-based access control. Access logging. Separated environments. Regular backup. Staff access only where needed for support, and logged when it happens.
If a breach occurs that affects you, we notify the Data Protection Commission and affected individuals as required, and we do it without undue delay.
11. Your rights
Under Act 843 you can ask us to:
•
tell you what we hold about you and why
•
correct anything inaccurate
•
delete your data, where we don’t need to keep it
•
stop processing for a particular purpose
•
withdraw consent to marketing, at any time
•
object to processing based on legitimate interest
Email info.mytabler@gmail.com. We respond within 30 days. There’s no charge unless a request is repetitive or excessive.
If a request relates to data an operator controls rather than us, we forward it to them within five business days and help them answer it.
12. Complaints
Come to us first, info.mytabler@gmail.com. If you’re not satisfied, you can complain to the Data Protection Commission of Ghana.
13. Children
myTabler is for adults. You must be 18 to hold an account. We do not knowingly collect data from anyone under 18. If we discover that we have, we delete it. Tell us at info.mytabler@gmail.com if you believe this has happened.
14. Changes
We update this policy when the law or the product changes. Material changes are notified in the app before they take effect. The date at the top shows the current version.