Privacy policy

Who holds your details

Two parties are involved. The restaurant you booked with decides what to collect and why — they are the ones you have a relationship with. Posto runs the software that stores those details for them, and acts on their instructions. If you want your details changed or removed, either of us can help; ask the restaurant, or write to us at privacy@bookposto.com.au.

What we collect

• Your name, mobile number and email address.
• The booking itself — date, time, party size, table, and which of the restaurant group’s venues it is at.
• Anything you type into the notes field, such as allergies, dietary requirements or the occasion. Only add what you want the restaurant to know.
• A history of your bookings at that restaurant group, including visits, cancellations and no-shows, so staff can recognise a regular.
• Messages sent to you about your booking, and any replies you text back.
• Where a venue holds a card against your booking, a reference from our payment provider with the card’s brand and last four digits. The full card number stays with the payment provider; we never see or store it. A restaurant group can offer that saved card back to you on a later booking, but only after you confirm a code we email you.
• Where the restaurant connects its point of sale, what your table ordered on each visit and what the bill came to, so staff can remember your usual and see how often you visit. We receive the items and totals, never your card details.

Why we use it

To hold your table, to tell you it is confirmed, to remind you it is coming up, to let you change or cancel it, and to let the restaurant run its service. That is the whole of it, unless you separately opt in to marketing.

Text messages and email

When you book, your contact details are used to send you messages about that booking — a confirmation, a reminder, and notice of any change or cancellation. These are service messages, not marketing, and they are part of making a booking.

Message frequency depends on how often you book. A booking usually produces a confirmation and a reminder; marketing messages, if you have opted in to them, are occasional.

Message and data rates may apply. Reply STOP to any text message to stop all further texts, or HELP for help. Email has an unsubscribe link on every marketing message.

We do not sell, rent or share mobile numbers with third parties or affiliates for their own marketing. Your number goes to our messaging provider for the sole purpose of delivering the messages described above, and nowhere else. No mobile information is shared for any other purpose.

Marketing, only if you ask for it

The box on the booking form that offers news and events from the venue is unticked by default, and we never tick it for you. If you tick it, we record that you did, when, and from where. You can withdraw at any time — unsubscribe from any marketing email, or reply STOP to a text. Withdrawing does not affect messages about a booking you have made.

Who else sees it

Staff at the restaurant group you booked with. Beyond them, we use a small number of providers to run the service, each of which only handles what it needs to:

• Hosting and database — data is stored in Sydney, Australia.
• An email provider, to deliver your confirmations and reminders.
• A messaging provider, to deliver text messages.
• A payment provider, only where a venue holds a card against your booking or charges a no-show or late-cancellation fee.
• The restaurant’s own point of sale, where it has connected one — we read bills from it; we never send your details to it.

We do not sell your details to anyone. We hand them over to authorities only where the law actually requires it.

How long we keep it

Your booking history stays with the restaurant group for as long as they use Posto, because it is what lets them recognise you next time. Ask us and we will delete your record, except where a venue has to keep something to meet its own legal obligations — a tax record of a fee it charged, for instance.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@bookposto.com.au and we will come back to you. Under Australian privacy law you can also complain to the Office of the Australian Information Commissioner if you think we have handled your details badly, though we would rather you gave us the chance to fix it first.

Security

Access is restricted to the restaurant group your booking belongs to, enforced in the database itself rather than only in the app. Traffic is encrypted in transit. No system is perfect, and we will tell you and the regulator if something goes wrong in a way that puts you at risk.

Children

Posto is not aimed at children. We do not knowingly collect details from anyone under 16 other than as part of a booking made by an adult.

Changes and contact

If this policy changes materially we will update the date at the foot of the page. Questions, requests or complaints: privacy@bookposto.com.au.