Privacy Policy

1.Who we are

GenieTables is a product of AI Genie, based in the United Kingdom. This policy explains how we handle personal data when a restaurant uses GenieTables, and when a guest calls a restaurant that we answer the phone for.

Where a restaurant uses GenieTables to manage its bookings, that restaurant is the data controller for its guest data. AI Genie acts as a data processor on the restaurant’s behalf, and a Data Processing Agreement is provided as standard.

2.Information we collect

From restaurants: contact name, business email, telephone number, venue details, booking rules, opening hours and billing information.

From guests calling a venue: the caller’s telephone number, name, party size, requested date and time, and any preferences or dietary requirements given during the call.

3.Call recordings and transcripts

Calls answered by GenieTables are recorded and transcribed so that the venue has an accurate record of what was agreed. Callers are told at the start of the call that it is recorded and that they are speaking with an AI assistant.

Recordings are retained for 30 days by default and transcripts for 12 months. A venue may request different retention periods.

4.How we use information

We use the information described above to:

• take, amend and cancel reservations on behalf of the venue
• send booking confirmations and reminders to guests
• provide the venue with call summaries, recordings and reporting
• operate, secure, support and improve the service
• meet our legal and regulatory obligations

5.Lawful basis

We process restaurant data to perform our contract with the venue. Guest data is processed on the venue’s instructions under its own lawful basis, typically performance of a contract (the reservation) or legitimate interests in operating the venue.

6.Sharing

We do not sell personal data and we do not share guest telephone numbers with third parties for marketing. We use trusted infrastructure and telephony suppliers to deliver the service, each bound by contract to process data only on our instructions.

7.Where data is held

Booking and guest data for UK venues is stored on servers in the United Kingdom. Where any transfer outside the UK is necessary, we rely on appropriate safeguards as required by UK GDPR.

8.Security

Data is encrypted in transit and at rest. Access is restricted to staff who need it to operate or support the service, and access is logged.

9.Your rights

Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to data portability.

If you are a guest of a restaurant using GenieTables, please contact that restaurant in the first instance, as it is the controller of your data. We will support the venue in responding. You may also complain to the Information Commissioner’s Office (ico.org.uk).

10.Retention

Booking records are retained for as long as the venue’s account is active, and for a reasonable period afterwards to meet legal and accounting obligations. Call recordings and transcripts follow the retention periods set out above.

11.Cookies

Our marketing website uses only the cookies necessary to make the site work. We do not use advertising cookies on this site.

12.Changes

We may update this policy. Material changes will be posted here with a revised “last updated” date.