Legal
Privacy policy
Last updated: 5 June 2026
Who we are
DevBux
Hm van Randwijkhove 77, 2717 TD Zoetermeer, Nederland
Email: info@mytable.club
Chamber of Commerce (KvK): 74627120
VAT number: NL004132989B53
We offer MyTable at https://www.mytable.club. This privacy policy explains what personal data we collect, why we use it, who we share it with and what rights you have.
Data controller
For customers and visitors of www.mytable.club, DevBux is the data controller for the personal data described in this policy.
What data we collect
Data you provide
- Making a reservation: your name, email address, number of seats and optional dietary notes;
- Contact by email: your name, email address and message content;
- Waitlist or newsletter (if available): your email address and preferred city, if you sign up.
- At events: photos and videos on which guests may appear recognisably, where you give consent when booking.
Data we collect automatically
- Technical data: IP address, browser type, operating system and device information;
- Usage data: pages visited and visit times, where needed for security and stability;
- Cookies: see the Cookies section below.
Data we receive from others
From Stripe, our payment provider, we receive payment status, transaction references, amount paid and currency. We do not store card or bank details ourselves.
Do you have to provide this data?
Name and email are required to make a reservation. Without them we cannot process your booking. Waitlist or marketing data is always optional.
Why we use your data
To fulfil your reservation
We use your name, email and booking details to process your reservation, send confirmation and share practical details.
Legal basis: performance of a contract.
To prepare partner venues
We share limited guest information with your table's partner venue, such as the name on the booking, group size and dietary requirements. We do not share your email, phone or payment details with venues for this purpose.
Dietary information may reveal health data. Providing it is optional; if you choose to do so, we treat that as your explicit consent to share it with the venue.
Legal basis: performance of a contract.
Financial administration
We retain order and invoice data to comply with legal obligations, including tax retention requirements.
Legal basis: legal obligation.
Website security and stability
We process technical logs to prevent abuse, keep the website stable and resolve issues.
Legal basis: legitimate interest.
Showing maps
On some pages we show interactive maps via Apple MapKit so you can view locations.
Legal basis: legitimate interest.
Marketing photos and video
We sometimes take photos and videos during MyTable evenings for promotion. Guests may appear recognisably in that material.
Legal basis: consent, given when you complete a reservation and accept our terms and conditions.
Retention: for as long as the material remains commercially relevant for our marketing, usually up to 3 years, unless the law requires otherwise.
You may object, withdraw consent or request deletion via info@mytable.club. Withdrawal does not have retroactive effect for material already published where reasonable removal is no longer feasible.
Who we share your data with
We never sell your data. We only share it with parties that help us deliver our services:
- Partner venues: limited guest information to run your table;
- Stripe (payments): processes your payment; we do not store card or bank details;
- Supabase (database and storage): stores booking data and media;
- Vercel (hosting): hosts our website;
- Resend (email): sends booking confirmations on our behalf;
- PostHog (product analytics, EU): pageviews, conversion events, heatmaps and session recordings to improve the website; form inputs are masked;
- Apple MapKit (maps): shows maps on event pages where enabled.
Some processors may process personal data outside the European Economic Area. Where that applies, we rely on an appropriate transfer mechanism such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Cookies
We use strictly necessary cookies for the website to function (for example session and language preference).
For product analytics we use PostHog (EU cloud). This may place a cookie or similar storage (localStorage) to measure usage: which pages you view, how far you scroll, where you click, and, with session recording, how you navigate the site. Form fields (such as email and password) are masked in recordings. We do not use this data for advertising profiling.
Payments are processed through Stripe's secure checkout. Stripe may place its own cookies on stripe.com during payment.
If we add marketing cookies or advertising tracking, we will ask for separate consent via a cookie banner.
How long we keep your data
- Order and invoice data: at least 7 years to comply with tax retention rules.
- Booking data: as long as needed to fulfil your reservation and any follow-up.
- Marketing photos and videos: usually up to 3 years, or shorter if you withdraw consent and removal is reasonably possible.
- Technical logs: kept briefly, only as long as needed for security and troubleshooting.
Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Send requests to info@mytable.club. We respond within one month.
You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.
Children
Our services are not aimed at children under 18. We do not knowingly collect personal data from children.
Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.
Changes
We may update this privacy policy from time to time. The date at the top shows when it was last revised. For material changes we will inform you via our website.