Privacy Policy for Tabres

Effective Date: 16.03.2026
Last Updated: 16.03.2026

Welcome to Tabres ("we," "our," or "us"). We are committed to protecting your privacy. Tabres provides an all-in-one hospitality management platform, including Point of Sale (POS), QR Menus, and inventory systems for restaurants, cafés, pubs, and hotels.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (tabres.com) and use our platform. This policy complies with the General Data Protection Regulation (GDPR), the UK GDPR, and applicable United States privacy laws (including the CCPA/CPRA).

1. Our Role in Data Processing

To understand our privacy practices, it is important to know how we interact with data:

As a Data Controller: When you (a business owner or representative) create an account with Tabres, we act as the Data Controller of the information you provide us directly.
As a Data Processor: When your customers use Tabres systems (like scanning a QR menu or paying via our POS), you are the Data Controller of their data, and we process it strictly on your behalf according to your instructions.

2. Information We Collect

We only collect information necessary to provide and improve our services.

Account Information: Name, email address, business name, and business details when you sign up.
Financial Information: If you opt to use our payment processing platform, we collect necessary transaction data to facilitate payments.
Operational Data: Menus, inventory, employee schedules, and table arrangements that you input into the Tabres ecosystem.

3. How We Use Your Information

We use the collected information for the following purposes:

To provide, operate, and maintain the Tabres platform.
To process transactions if you use our optional payment platform.
To provide customer support.
To maintain the security and reliability of our cloud-based infrastructure.

4. Analytics, Tracking, and Cookies

Tabres takes a privacy-first approach to analytics and tracking:

No Standard Cookies: Our core platform does not use traditional cookies or third-party tracking cookies to monitor user behavior.
Privacy-Friendly Analytics: We use self-hosted Plausible for website analytics. This is a privacy-first tool that does not track personal data, meaning your users' privacy remains intact.
Meta Pixel (Conditional Use): We occasionally run Meta (Facebook/Instagram) advertisements. During active ad campaigns, we may turn on the Meta Pixel strictly to track the effectiveness of our ads. We do not share any personal data with Meta, nor do we use it to track general behavior on our site. When ad campaigns end, the Pixel is turned off.

5. Data Sharing and Subprocessors

We do not sell your personal data. We only share data with trusted infrastructure partners (subprocessors) necessary to run our services:

Cloudflare: Used for CDN (Content Delivery Network) and advanced security routing. Cloudflare is known for strict privacy adherence.
AWS (Amazon Web Services): We use AWS S3 for secure file storage.
Self-Hosted Error Logging: We do not use third-party services to keep error logs. All operational error tracking is self-hosted to prevent data leakage.

6. Data Storage and Security

Location: All of our servers, including our AWS S3 file storage, are located securely within Europe.
Security: We employ enterprise-grade security, including encrypted transactions and GDPR-compliant data protection measures, to ensure your data is safe.

7. Your Privacy Rights (GDPR, UK GDPR, and US Laws)

Depending on your location, you have specific rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data.
Right to Restrict Processing: You can ask us to block the processing of your personal data.
Right to Data Portability: You can request your data in a structured, commonly used format.
Right to Object: You can object to our processing of your personal data.
US State Rights (e.g., CCPA/CPRA): As stated, we do not sell personal information. Residents of California and other applicable US states have the right to non-discrimination for exercising their privacy rights.

To exercise any of these rights, please contact us at privacy@tabres.com.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax or legal accounting purposes).

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date."

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Tabres
Email: privacy@tabres.com
Website: https://tabres.com