Privacy Policy

When you make a booking, we collect:

• Your name, phone number and email address.
• Your group’s name, if you give one.
• The booking itself — which bar, which night, how many people, the amount, the area, the tab window, and anything you write in the requests box.
• The fact that you confirmed you are 21 or older, and when.
• If you make an account, your email address and the fact that you signed in. We do not use passwords — signing in is a link sent to your email.
• Ordinary technical records that any website keeps: the pages requested and rough timing, used to keep the site up and to rate-limit abuse.

We never take your card number, your card security code or your bank details. Payment happens on the bar’s own payment page, and none of it passes through us. We also never ask for, receive or store a photograph or scan of a driving licence, passport or any other identification.

That second one is a deliberate design decision, not an oversight. A photograph sent to us days earlier would not help a bar meet its obligations under Florida law, which protects a vendor who checked identification presented at the time of service. Holding licence numbers would create real risk for you and for us and buy nobody any protection, so we do not hold them.

To put your request in front of the bar, to let the bar decide, to tell you what they said, to let you find your booking later, and to answer you when something goes wrong. We also keep a record of what happened to a booking — when it was submitted, approved, declined or cancelled — because a bar and a group disagreeing about a night is exactly when an accurate record matters.

• The bar you booked. Staff at that bar see your name, phone, email, group, the booking and your notes. They need it to run the night and to reach you. They do not see your bookings at other bars.
• Us. The three people who run Tables n Tabs, to operate the service and to invoice bars.
• The companies that run our infrastructure. They process data on our instructions, only to provide their service, and they are: Supabase (database and sign-in), Render (web hosting), Resend (email), Twilio (text messages), Cloudflare (domain and mail routing), and Sentry (error reports, described below). All are in the United States.
• Anyone you give your booking code to. The code opens the booking page. That is what makes it shareable with your group, and it is why you should not post it publicly.
• Law enforcement or a regulator, where we are legally required to.

We do not sell your personal information, and we do not share it for advertising. We do not run advertising trackers on this site.

We use cookies only to keep you signed in and, during the private preview, to remember that you entered the preview password. There are no advertising or analytics trackers, which is why you are not being asked to accept anything. If that changes, we will say so here and ask you properly first.

When a page fails, it sends a report to Sentry so we find out before you have to tell us. The report is the technical detail of the fault — the error, the kind of browser, and which page it happened on.

We have deliberately turned off the parts that would identify you. It does not carry your name, email, phone number, IP address, or anything you typed into a form, and your booking code is replaced with a placeholder before the report leaves your browser — the code opens your booking, so it is treated as a password rather than as a page name. It is not analytics: nothing is recorded when a page works.

Booking records are kept while the service operates, because they are the history of what was agreed between a group and a bar, and both sides may need them. Where a record can be removed without destroying that history, we archive rather than delete, so an old booking still makes sense.

If you want your details removed, email bookings@tablesntabs.com and we will tell you what we can and cannot remove, and why.

Data is held on managed, access-controlled infrastructure. Sign-in links and any approval tokens are stored as one-way hashes rather than in a form anyone could reuse. Access is limited to the people who need it.

No system is perfectly secure, and we are not going to claim otherwise. Under Florida’s Information Protection Act, if personal information is breached we are required to notify the people affected, and we will — promptly, plainly, and saying what we actually know rather than the least we can get away with.

You can ask us what we hold about you, ask us to correct it, or ask us to delete what is not required for a booking record or by law. Email bookings@tablesntabs.com and a person will answer.

Booking emails are not marketing — they tell you what a bar decided about a booking you made, and you cannot switch them off while a booking is live. If we ever send marketing, it will be a separate thing you opt into, and every message will let you stop it.

This service is for adults of legal drinking age. It is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has given us information, tell us and we will remove it.

If this policy changes, the date at the top changes with it. If we start doing something materially different with your information, we will say so on the site rather than quietly edit this page.

Southern Hospitality ENT LLC, Gainesville, Florida. Email bookings@tablesntabs.com and a person will reply.