Privacy Policy

1. Who We Are

Tablely ("we", "us", or "our") is an Australian business operating the marketing website at thetablely.com and the application at app.thetablely.com. We provide digital seating chart tools for weddings and events, and are based in Melbourne, Victoria, Australia.

This Privacy Policy explains how we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our data practices are also aligned with the principles of the EU General Data Protection Regulation (GDPR) for users located in the European Economic Area.

For questions about this policy, contact us at support@thetablely.com.

2. Information We Collect

We collect personal information that is reasonably necessary to provide our service (APP 3).

Information you provide

• Account registration details (name, email address, password)
• Event details (event name, date, venue)
• Guest lists you upload (guest names, table assignments)
• Payment and billing information (processed by our payment provider; we do not store card numbers)
• Communications you send to us

Sign in with Google

If you choose to sign in with Google, we receive your name and email address from Google and use them solely to create and manage your account. We do not receive your Google password or any other Google account data.

Information collected automatically

• Page views and navigation data via Vercel Analytics (anonymised; no cookies set)
• Browser type, device type, and operating system
• IP address (used for fraud prevention; not linked to your identity)
• Referring URLs

3. How We Use Your Information

We only use your personal information for the primary purpose for which it was collected, or a directly related secondary purpose (APP 6). This includes:

• Creating and managing your account
• Providing and improving the Tablely service
• Generating QR codes and seating charts for your events
• Processing payments and sending receipts
• Sending transactional emails (e.g. password reset, account confirmations)
• Responding to support requests
• Detecting and preventing fraud or abuse
• Complying with legal obligations

We do not sell your personal information. We do not use your information for targeted advertising.

4. Cookies

This marketing website (thetablely.com) does not set any tracking cookies. We use Vercel Analytics, which is cookie-free and collects only anonymised, aggregated data.

The Tablely application (app.thetablely.com) uses strictly necessary session cookies to keep you signed in. No third-party advertising cookies are used.

5. How We Share Your Information

We only disclose your personal information in limited circumstances (APP 6):

• Service providers: We use trusted third parties to operate our infrastructure (e.g. hosting, payment processing, email delivery). These providers are contractually bound to handle data securely and only on our instructions.
• Legal requirements: We may disclose information if required by Australian law, a court order, or to protect the rights, property, or safety of Tablely or our users.
• Business transfers: In the event of a merger or acquisition, personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. Overseas Disclosure

Some of our service providers (such as hosting and analytics infrastructure) are located overseas, including in the United States. Before disclosing your personal information to an overseas recipient, we take reasonable steps to ensure they handle it in a manner consistent with the Australian Privacy Principles, as required by APP 8. Where our providers operate in the EU or process data on behalf of EU/EEA users, we ensure they are GDPR-compliant.

By using our service, you acknowledge that we may disclose your information to overseas recipients for the purposes described in this policy.

7. Data Retention

We retain your personal information for as long as your account is active and as needed to provide our service (APP 11.2). If you delete your account, we will delete or de-identify your personal information within 30 days, except where we are required to retain it by law (e.g. billing records for taxation purposes, typically 5 years under Australian law).

8. Your Rights

Under the Australian Privacy Principles, you have the following rights:

• Access (APP 12): Request access to the personal information we hold about you. We will respond within a reasonable period (generally 30 days) and provide access in the format you request, where reasonable.
• Correction (APP 13): Ask us to correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Complaints: Lodge a complaint with us if you believe we have mishandled your personal information. We will investigate and respond within 30 days.

To exercise any of these rights, email support@thetablely.com.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

9. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure (APP 11), including TLS encryption in transit and encryption at rest. No method of transmission over the internet is 100% secure, but we take reasonable precautions proportionate to the sensitivity of the data we hold.

10. Children

Tablely is not directed at children under the age of 15. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice in the app. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact our Privacy Officer: