FOR OPERATORS
Last updated 22 August 2026
Your numbers are yours. We don’t show your pricing, volumes or occupancy to another operator, and we don’t use them to help one. Guest data stays inside the app, and guests appear to you by ID rather than by full name.
Handing your booking data to a platform is a real decision. This page sets out the commitments we make in return, all of which are contractual under Schedule 3 of the Operator Agreement.
1. Your commercial information
We will not disclose your pricing, guest volumes, settlement figures, occupancy or performance data to any other operator.
We will not use your commercial information to advantage another operator on the platform.
Where we publish benchmarks or market insight, we use aggregated and anonymised data only, and never in a form that lets your individual figures be identified.
2. Who at myTabler can see your data
Our staff and subcontractors access your data only where it’s necessary to support you. Every access is logged, and we’ll give you the access record on reasonable request.
3. Security
Your data gets the same protection as guest data: encryption in transit and at rest, role-based access control, access logging, separated environments, and regular backup.
Our recovery point objective is 24 hours and our recovery time objective is 8 hours.
4. Guest data; and why it works this way
Guests are shown to you by a Guest ID, together with the details you need to seat and serve them. You do not receive full names as a matter of course, and you must not try to re-identify a guest from an ID.
Export of guest personal data is switched off for the first twelve months. You manage your guest relationships inside the app during that period. We may enable export afterwards, at our discretion, where you’re in good standing under Acceptable Use.
Operational and financial reports that don’t identify individual guests are exportable at any time.
Three reasons for this:
It protects the guest. They gave their details to book a table, not to join a mailing list.
It protects you. The less guest personal data sits on your side, the smaller your own obligations and exposure under the Data Protection Act, 2012 (Act 843). If you never export a list, you never have to secure one, delete one, or answer for one.
It protects the relationship. Loyalty built inside the platform is loyalty tied to how you actually treat people, not to a spreadsheet.
5. Your staff
Personal data about your staff and authorised users is processed only to set up their accounts, deliver support, and keep the platform secure.
You’re responsible for removing access when someone leaves. Do it promptly.
6. Data you own
Your inventory, availability, package configuration, arrival records and settlement records are yours. We process them to run the platform and to settle your money, and for nothing else without your written instruction.
7. What happens if you leave
Your data is available for export for 30 days after termination. After 90 days we delete or anonymise it, apart from records we must keep by law, records needed to resolve a dispute, and aggregated anonymised platform data.
We’ll confirm deletion in writing if you ask.
You must delete guest personal data you obtained through the platform within 90 days, and confirm that to us. We record the confirmation against your account.
8. Checking up on us
Once a year you can ask for the information you reasonably need to confirm we’re meeting these commitments. We’ll respond with our current security summary, our sub-processor list, and any third-party audit report we hold.