Privacy notice

This notice explains how Louisa Porogovska, trading as My Table Plan ("we") handles personal data. For account holders' data we are the data controller. For guest details that planners add to their events, the planner is the controller and we process that data on their behalf to provide the service.

What we collect and why

• Account details (name, email, password) — to create and secure your account. Basis: contract.
• Event and guest information (guest names, emails, party sizes, dietary and allergy notes, menu choices, RSVPs, seating) — to provide the service. Basis: contract; dietary data is handled only to produce the reports you request.
• Messages to us — to give support. Basis: legitimate interests.
• Technical data (IP address, device and browser information, usage logs) — for security, fraud prevention and keeping the service working. Basis: legitimate interests.
• Emails we send (invites, entry passes, password resets) and delivery records — to provide the service. Basis: contract.

Who we share it with

• Service providers who host our app, database and email delivery, under contracts that protect your data.
• Paddle.com, our Merchant of Record, for selling our plans, managing subscriptions, payments, tax compliance and invoicing.
• Professional advisers such as accountants and lawyers.
• Authorities where the law requires it.

We never sell personal data.

International transfers

Some providers may process data outside the UK. Where that happens we rely on adequacy decisions or standard contractual clauses (including the UK addendum) to protect it.

How long we keep it

We keep account and event data while your account is active, and delete or anonymise it within 12 months of account closure unless we must keep it longer by law (for example financial records).

Your rights

Under UK GDPR you can ask to access, correct, erase, restrict or move your data, object to processing, and withdraw consent at any time. Email info@mytableplan.dev; we reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Security

We use encryption in transit, access controls and restricted permissions to protect data.

Cookies

We use only essential storage needed to keep you signed in and remember your plans. We don't use advertising or analytics cookies. You can clear them in your browser settings, though you'll then be signed out.