Privacy Notice

Effective Date: June 24, 2026. This Privacy Notice supersedes and replaces any prior privacy policy.

1. Scope of this Privacy Notice

Table's Ready, LLC ("we", "us", or "our") is committed to protecting the privacy of the individuals about whom we collect personal information ("user", "you" or "your"). This Privacy Notice is designed to assist you in understanding how we obtain, use, share, safeguard, retain and destroy your personal information. "Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual. As discussed in Section 2, we may obtain personal information from you directly, or about you from other sources, including your interaction with our Services and from third parties. This policy also explains your choices about how we use information about you. As used here, "service provider" means a third party who processes personal information on our behalf (known under the EEA GDPR and UK GDPR as a "processor").

In addition to providing our website(s) we also provide various online services delivered both from our website(s) and through our web application at host.tablesready.com and mobile applications. We refer to all of these services, together with our websites, collectively as "Services" in this policy.

Age restrictions; children under 16

Our Services are not targeted to, intended to be consumed by, or designed to solicit individuals under the age of 16. We do not knowingly collect personal information from children under age 16. If you know of or have reason to believe anyone under the age of 16 has provided us with personal information, please contact us.

2. Details about the personal information we collect

The categories below describe the personal information we obtain, the sources we obtain it from, our business or commercial purposes for using it, the categories of service providers and/or third parties to whom we disclose it, and our purposes for disclosing it. The specific types listed are examples and not exhaustive.

Personal identifiers

Such as first and last name, telephone (including cell phone) numbers, address and/or parts of an address, email address, credit card account numbers, account names, screen or user names, and IP addresses.

Sources: Directly from you (e.g., when you set up an account, create or manage a profile, input it into the Services, or send us communications); from your online interactions with us (including our website and web app), including for payment purposes.
Purposes: To communicate with you (transactional emails and in-Service messages, purchase confirmations, subscription reminders, customer support, technical/security/administrative notices); to provide and personalize the Services; to enable payment for paid Services; to verify your identity; to provide customer support; and to send you targeted advertisements and promotional communications.
Recipients: Payment processors, hosting/infrastructure providers, analytics providers, advertising providers, and customer-support tools (see Section 4).

Device identifiers

Such as device identifiers, advertising identifiers (IDFA / Android equivalent), URLs of referring pages, language preferences, and device manufacturer/type.

Sources: From your interactions with our Site(s) and Services, including features you use and links you click.
Purposes: To analyze usage trends and improve the Services; to test and analyze new features.
Recipients: Analytics and advertising providers (see Section 4).

Technological identifiers

Such as cookies and similar technologies (local storage, pixels and tags, site/container tags, clear GIFs, embedded scripts, entity tags/e-tags).

Sources: From your interactions with our Site(s) and Services.
Purposes: To operate and maintain the Services; to provide the Services you request; to set your preferences and personalize your experience; for verification and security; for analytics; and, with your consent, for targeted advertising and promotional communications.
Recipients: Analytics and advertising providers (see Section 4). See our Cookie Notice for details and to manage your choices.

Commercial information

Records of products or services purchased, obtained, or considered.

Sources: Directly from you and from analysis of your transactions.
Purposes: To fulfill legal obligations and to offer you additional products or services.

Customer records

Such as business contracts, purchase histories, invoices, proposals, billing and payment records, and customer-support records.

Sources: Directly from you and from analysis of your transactions with us.
Purposes: To provide the Services you request; to fulfill legal obligations and protect our legitimate business interests; to offer additional products or services.

Internet or other electronic network activity

Such as log data, browsing history, device/browser/operating-system and connection information, features you use and links you click, product-analytics events (Amplitude) and operational metadata (Datadog) as described in our Security page, and screen and session recordings (described below).

Sources: From your interactions with our Site and Services and from your browser, computer, tablet, mobile phone and other devices.
Purposes: To provide functionality; to troubleshoot and improve the Services; to test new features; for verification and security.
Recipients: Analytics and infrastructure providers (see Section 4).

Screen and session recordings. Within our application (host.tablesready.com), we record a small sample of user sessions for product-analytics purposes — to understand how features are used and to improve the Services. We do not currently capture screen or session recordings on our marketing website, but we may do so from time to time to improve the site; where we do, such recording is treated as an analytics technology and is subject to your consent choices (see our Cookie Notice).

Geolocation data

Such as approximate location via IP address (which may be used together with country preference).

Sources: From your interactions with our Site and Services and from your devices.
Purposes: To approximate your location to provide a better Services experience.

Communications with or by you

Such as email, text and other messages.

Sources: Directly from you through correspondence, posts, surveys, interactive features, activities and events.
Purposes: To provide the Services you request; to provide you with notices; to receive your inquiries and feedback.

Inferences

Drawn about you from information provided by or obtained about you (for example, using your email domain to infer your affiliation with an organization or industry to personalize content and experience).

Sensitive personal information

The only categories of "sensitive personal information" (as defined under California and other US state privacy laws) we collect are account log-in credentials and payment/financial account information, and we collect these solely to provide, secure, and bill for the Services. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you, or for any purpose that would entitle you to a "Right to Limit the Use of My Sensitive Personal Information." We do not collect precise geolocation (we approximate location only at the city level from IP address), and we do not knowingly collect special categories of data such as racial or ethnic origin, health, religious or philosophical beliefs, or biometric data.

3. Cookies and similar technologies

We use cookies and similar technologies as described in Section 2 and in detail in our Cookie Notice. We do not load analytics, advertising, or third-party embedded content until you allow them, and you can change your choices at any time from the Cookie Notice page or via the "Your Privacy Choices" link in our website footer. Although we do not sell or share personal information for cross-context behavioral advertising, we also honor the Global Privacy Control (GPC) signal and treat it as a request to opt out of any such sale/sharing and to disable advertising cookies.

How signing up affects your choices

If you create an account (free account, free trial, or paid subscription), you consent — as part of our Terms of Service — to our use of first‑party analytics and similar technologies to operate and improve the Services, including a limited sample of in‑application session recordings as described in Section 2. This account‑based first-party analytics and service-improvement processing is a condition of creating and using a TablesReady account and our application. If you do not agree to it, you should not create an account or use the application. It applies to our own first‑party use only. It does not waive your right to opt out of the sale or sharing of your personal information or of targeted advertising, and we continue to honor those opt‑outs and the GPC signal while you have an account; you can exercise them at any time via the controls in this Notice and our Cookie Notice. On our marketing website, and for visitors who have not signed up, we do not load analytics, advertising, or third‑party embedded content until you allow them. If you are in the EEA or UK, consent to non‑essential cookies is managed separately as described in our Cookie Notice and is not given solely by accepting our Terms of Service.

4. Additional details about our sharing of personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising (as those terms are defined under the California Consumer Privacy Act, as amended by the CPRA, and other US state privacy laws), and we have not done so in the preceding 12 months. We use Google Ads only for keyword-based search advertising and to measure conversions from ads you click, and we use analytics providers to understand how our Services are used; these providers act as our service providers / processors and are contractually restricted from using your information to build cross-site advertising profiles or for their own purposes. We do not engage in retargeting or remarketing. When we share personal information with service providers, we do so under written agreements and appropriate safeguards.

a. Affiliates

We may share your personal information with our affiliates (companies related through common ownership and/or control), where applicable.

b. Service providers

We share personal information with service providers/processors that help us operate, provide, improve, integrate, customize, support and market our Services, including website/application development, hosting, maintenance, backup, storage, infrastructure, payment processing, analytics, and marketing. They act under our instruction and are authorized to use the information only to perform services for us. Some analytics and marketing providers may also collect and use information for their own purposes when you visit their sites or use their services.

Service providers and sub-processors. The current, authoritative list of the sub-processors that process personal data within our application (host.tablesready.com) is maintained in Annex III of our Data Processing Agreement, which we keep up to date and which governs how we notify customers of changes.

Separately, our marketing website (tablesready.com) uses the following third parties for analytics, advertising, and embedded content, which you can manage through our Cookie Notice: Google (Google Tag Manager, Google Analytics, Google Ads, Google Fonts, reCAPTCHA); Microsoft (Bing Ads); Netlify (website hosting and form handling); Trustpilot, Gartner, Capterra, and SourceForge (customer reviews and badges); and Vimeo / Embedly (video hosting).

We obtain aggregated information from our analytics providers about the use of our Services (such as number of unique/active users, country, access times and pages visited, operating systems and device types, browser types, acquisition channel, and certain aggregated demographics). We use Google Analytics for website analytics and Amplitude for product analytics. For information on how Google uses data from sites that use its services, see How Google uses data when you use our partners' sites or apps.

c. Other reasons we may use or share your personal information

We generally use personal information only for the purpose for which it was provided. We may also use it to verify information, respond to inquiries, contact you when necessary, and send you information about our products, services, and promotions (or, with your consent, those of third parties). We may disclose personal information where necessary to comply with applicable law or legal process; to provide requested products/services; to protect the security and integrity of our products and services and our rights and property; to enforce our agreements; to protect users and the public from harm or illegal activity; to operate and maintain our systems; to detect, prevent, or address fraud or security/technical issues; or to respond to an emergency. We may also transfer information in connection with a merger, acquisition, financing, sale of assets, or bankruptcy/reorganization involving us.

5. Social media providers and third-party apps and links

Social media: We participate in social media services such as Facebook, LinkedIn, and Instagram. We do not control their data practices; review their privacy policies.
Third-party apps: Enabling integrations (e.g., Square, Google, Stripe) may give those apps access to your account and information. Their practices are governed by their own policies.
Third-party widgets and plug-ins: Some Services contain widgets and social/review features (e.g., Trustpilot, Gartner). These may collect your IP address and set cookies; your interactions are governed by the provider's policy. On our marketing site, these load only after you allow "Embedded content."
Third-party links: Our Services may link to third-party sites whose practices differ from ours and are not covered by this Notice.

6. Submissions

Any information you transmit, post, or upload to public or interactive areas of the Services ("Submissions") may be read, collected, or used by others. We are not responsible for information you choose to submit in Submissions.

7. How we protect personal information

We maintain reasonable administrative, technical, and physical measures intended to protect personal information, and we require similar measures from our service providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. See our Security page for more detail.

8. Do Not Track and Global Privacy Control

There is no industry consensus on browser "Do Not Track" (DNT) signals, and we do not currently respond to DNT signals. We do not sell or share personal information for cross-context behavioral advertising; nonetheless, we do honor the Global Privacy Control (GPC) signal and treat it as a request to opt out of any such sale/sharing and to disable advertising cookies. You can manage analytics, advertising, and embedded-content choices via our Cookie Notice. To learn more about DNT, visit allaboutdnt.com.

9. Your rights

Under the laws of certain states or countries, you may have rights regarding your personal information, including the rights to access/obtain a copy (including in portable format), to correct, to delete, to object to or restrict processing, to opt out of sale/sharing and certain automated processing, and to not be discriminated against for exercising your rights. State- and region-specific rights are described in Section 12 and the addenda. To exercise your rights, contact our Data Protection Manager (Section 14).

a. Opt-out / unsubscribe

You may unsubscribe from marketing emails using the link in each email or by contacting us at support@tablesready.com. Some transactional/service messages cannot be opted out of while you use the Services.

b. Corrections; updates

To change information you previously provided, email support@tablesready.com.

10. Retention and destruction of personal information

We retain personal information only as long as necessary for the purposes for which we collected it or as required by law or agreement, after which we delete or anonymize it.

Account information: retained while your account is active and up to 18 months thereafter, plus as needed to meet legal obligations, resolve disputes, and enforce agreements.
Marketing information: retained for a reasonable period from your last expressed interest.
Cookies and similar technologies: see our Cookie Notice.

11. International transfer of personal information

We are located in the United States. If you use our Services from another country, your information may be transferred to, and processed and stored in, the United States and other locations where we or our service providers operate, which may not have privacy laws equivalent to those of your country. Whenever we transfer your information, we take steps to protect it as described in this Notice.

12. Privacy notice for specific states, countries, regions

a. California (CCPA/CPRA)

This section applies to California residents and supplements the rest of this Privacy Notice, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

Notice at collection. The categories of personal information we collect, the sources, our purposes for collecting and using it, the categories of recipients, and our retention criteria are described in Sections 2, 4, and 10. We collect the following CCPA categories: identifiers; customer records (Cal. Civ. Code §1798.80); commercial information; internet or other electronic network activity; geolocation data (approximate, city-level); audio/visual information (in-application session-recording samples); professional or employment-related information; and inferences. We collect the sensitive personal information described in Section 2 (account log-in credentials and payment information) for the limited purposes stated there.

We do not sell or share. We do not sell your personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16.

Right to Limit sensitive personal information. As explained in Section 2, we use sensitive personal information only for purposes that do not give rise to the "Right to Limit the Use of My Sensitive Personal Information," so we do not offer a separate limitation mechanism.

Your California rights. Subject to certain exceptions, you have the right to: know/access the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of recipients; delete personal information collected from you; correct inaccurate personal information; opt out of the sale or sharing of personal information (not applicable — we do not sell or share); limit the use of sensitive personal information (not applicable — see above); and non-discrimination for exercising your rights.

How to exercise your rights. Email support@tablesready.com.

Verification. To protect your information, we verify your identity before responding — generally by confirming information associated with your account, or, for non-account holders, information we can reasonably match to our records. Information provided for verification is used only for that purpose.

Authorized agents. You may use an authorized agent to submit a request if the agent provides written, signed permission to act on your behalf; we may still ask you to verify your identity directly.

Shine the Light. California Civil Code §1798.83 permits California residents to request information about disclosures of personal information to third parties for those third parties' own direct-marketing purposes. We do not disclose personal information to third parties for their own direct marketing.

b. Nevada

This applies to Nevada residents and "covered information" under NRS 603A. Our collection, sources, and purposes are described in Section 2; disclosure practices in Sections 2–4. We do not sell consumer personal information as defined under Nevada law, and have not done so in the preceding 12 months. We do not offer financial incentives related to personal information. Nevada residents may review and request changes to covered information by contacting support@tablesready.com.

c. Other US state privacy laws (Virginia, Colorado, Connecticut, and similar)

If you are a resident of a US state with a comprehensive consumer privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect), you have the right, subject to exceptions, to: confirm whether we process your personal data and access it; correct inaccuracies; delete personal data; obtain a portable copy; and opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data, engage in targeted advertising, or conduct profiling that produces legal or similarly significant effects, so those opt-outs do not apply to our processing; we honor the GPC signal as described in Section 8.

To exercise these rights, email support@tablesready.com. We will respond within the time required by applicable law. Right to appeal: if we decline your request, you may appeal by replying to our response or emailing support@tablesready.com with "Privacy Appeal" in the subject line. We will respond within the period required by applicable law, and if we deny the appeal we will provide information on how to contact your state attorney general.

d. European Economic Area and United Kingdom

If you are located in the EEA or UK, the GDPR / UK GDPR applies to our processing of your personal information. See Addendum 12B below for details, including legal bases, recipients, and your rights.

e. Canada

Your personal information may be processed by us and our service providers outside Canada, including in the United States. You may request access to or correction of your personal information, or withdraw consent, by contacting us (Section 14), subject to applicable legal and contractual restrictions.

13. Changes to this Privacy Notice

We may change this Privacy Notice at any time by updating this posting. Changes are effective when posted, and the new effective date will be identified. Where required by a contract referencing this Notice, we will provide notice as that contract requires.

14. Contact us

For questions about our privacy practices or this Notice, contact:

Data Protection Manager Table's Ready, LLC 11 Forest Green Rd Rye, NH 03870

Email: support@tablesready.com

Addendum 12A — Nevada Privacy Notice

This Notice applies to Nevada residents and to "covered information" under NRS 603A.310, .320, and .330. The categories of covered information we collect, the sources, and the purposes are in Section 2. Our disclosure practices are in Sections 2–4. We do not sell personal information as defined under Nevada law and have not done so in the preceding 12 months. We do not offer financial incentives related to the collection, retention, or sale of personal information. Whether a third party may collect covered information about your activities over time and across sites is addressed in Sections 2–4 and Section 8. To review or request changes, contact support@tablesready.com. This Nevada Privacy Notice is effective as of June 24, 2026.

Addendum 12B — EEA and UK Privacy Notice

1. Personal information collection practices

See Section 2 for the personal information we collect, the purposes, and how it is shared. "Personal information" is intended to cover "personal data" under the GDPR/UK GDPR. We also collect personal information through cookies — see our Cookie Notice.

Legal bases for processing:

Personal identifiers: to enter into and perform our contract with you; otherwise, our legitimate interests in the purposes described in Section 2.
Device identifiers; commercial information; customer records; internet activity; geolocation; communications; inferences: our legitimate interests in the purposes described in Section 2.
Technological identifiers (cookies/pixels for analytics and advertising): your consent.

Recipients: the categories of service providers and third parties identified in Section 4.

International transfers: where a transfer outside the EEA/UK requires a legal basis under Article 46, it is made pursuant to the EEA and/or UK Standard Contractual Clauses, or based on an adequacy decision where applicable.

2. Your rights

You have the rights of access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent (without affecting prior processing), the right to lodge a complaint with a supervisory authority, and the right not to be subject to solely automated decisions producing legal or similarly significant effects (subject to the exceptions in Article 22).

3. How to make requests

Email support@tablesready.com. We may use a two-step process to confirm deletion requests.

4. Contact information

Controller: Table's Ready, LLC, 11 Forest Green Rd, Rye, NH 03870. Our full contact details, including our Data Protection Manager, are set out in Section 14 of this Privacy Notice.

EEA / UK Representative: We have not appointed a representative under Article 27 of the GDPR or UK GDPR.