Privacy policy

Guests of a café or restaurant: when you use a venue’s page (menu, feedback, stamp card), that venue is responsible for your data (the “controller”). EncoreTable processes it on the venue’s behalf, under a data processing agreement. The venue’s name is shown at the top of its page and its contact email in the sign-up form.

Businesses that use the EncoreTable dashboard, and visitors of this website: PA Global Services is the controller.

Without an account: your feedback (stars, comment and the dishes you rate) and, only if you ask the venue to contact you, the email address or phone number you enter. We do not ask for your name.

With an account (optional): name, email address, phone number (optional), birthday (optional, day and month only, used for the birthday gift), the dietary preferences you choose, your language, whether and when you agreed to receive offers, your visits, stamps, gifts and prepaid bundles, and the receipt total if the staff enters it.

Dietary preferences can say something about your health (for example an allergy). You only share them if you choose them; they are used to filter the menu for you.

If you add your card to Google Wallet, an identifier, your name and your stamp count are sent to Google.

Page opens and clicks to Google are counted without identifying you: no name and no IP address are stored with them.

Showing the menu and handling your feedback: the venue’s legitimate interest in improving its service.

Running the loyalty programme you joined (stamps, gifts, bundles): the agreement you enter into when you sign up.

Sending offers and “we miss you” messages: only with your consent. You can withdraw it at any time with the link in each message or by deleting your account.

Security and preventing abuse (for example one stamp per day): legitimate interest.

Name, email address, password (stored only as a one-way hash, never readable), sign-in times and, if enabled, two-step verification settings. We use this to provide the service, to invoice and for security.

EncoreTable only uses functional cookies: your language, your session in the dashboard, recognising your account on your phone, the register screen of a venue, and avoiding counting the same page open twice. There are no advertising or tracking cookies and no third-party analytics. That is why no cookie banner is needed.

Vercel Inc. (hosting; our servers run in Frankfurt, EU), Neon Inc. (database, hosted in Frankfurt, EU) and Vercel Blob (dish photos). If the venue uses email messages: Resend (email delivery). If you use Google Wallet or open the link to Google reviews: Google, under its own privacy policy.

Some of these providers are companies based in the United States. Any transfer outside the EU is covered by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

We do not sell personal data and we never share data between different businesses.

A guest account is kept until you delete it or the venue removes it. Feedback is kept while the venue uses EncoreTable.

When a business stops using EncoreTable, its data (including its guests’ data) is deleted within 30 days after the end of the subscription, unless the law requires us to keep it longer. Invoicing data is kept for 7 years (Dutch tax law).

You have the right to access, correct and delete your data, to restrict or object to processing, to data portability and to withdraw consent.

Guests can delete their account themselves on the venue’s page (“Delete my account and my data”). For other requests, contact the venue or us: we will help or forward your request.

You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Encrypted connections (HTTPS), passwords stored as hashes, a personal account for each dashboard user with optional two-step verification, and data stored in the EU.

PA Global Services, Keizersgracht 616, 1017 ER Amsterdam, Nederland. Email: [email].