Privacy Policy

When you make a reservation we collect:

• Your name and email address
• Your booking details — restaurant, table, date, time and party size
• Anything you choose to tell us in the optional fields, such as the occasion, a welcome drink preference, or notes about allergies and accessibility
• A record of the payment — the amount, and a reference from our payment provider

We never receive or store your card details. Card information is entered directly with PayFast, our payment provider, and never reaches our systems.

If you are a restaurant using our dashboard, we also hold the email address you sign in with.

We use your information to create and confirm your reservation, to tell the restaurant to expect you, to take payment, to send your confirmation email, and to respond to you if you contact us. We also keep transaction records because we are required to.

We do not sell your information, and we do not send marketing email unless you have asked us to.

We share the minimum necessary with:

• The restaurant you book — your name, party size, time, table, and any notes you provided. They need these to seat you and cater to your requests.
• PayFast — our payment gateway, to process your payment.
• Resend — to deliver your confirmation email.
• Supabase — where our database is hosted.
• Vercel — where this website is hosted.

Some of these providers process data outside South Africa. Where that happens we rely on providers that offer protection comparable to POPIA.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

We keep booking and payment records for as long as we need them to run the service and to meet our legal and tax obligations. Where we no longer need information that identifies you, we delete it or remove the identifying parts.

We do not use advertising or tracking cookies. We set a small number of strictly necessary cookies so that restaurant and administrator sign-ins work. Blocking these will prevent the dashboard from functioning, but does not affect making a booking.

Information is transmitted over encrypted connections and stored with access controls so that a restaurant can only see its own bookings. Payment card data never touches our systems. No system is perfectly secure, but we take reasonable steps to protect what we hold.

You have the right to:

• Ask what personal information we hold about you
• Ask us to correct information that is wrong or incomplete
• Ask us to delete information we no longer have a reason to keep
• Object to us using your information in a particular way
• Complain to the Information Regulator of South Africa if you believe we have mishandled your information

To exercise any of these, email primeseat@primeseat.co.za. We may need to confirm your identity before acting, so that we do not disclose your information to someone else.

We may update this policy. The date at the top of this page shows when it last changed, and the current version always applies.