Privacy notice
Who we are
LastTable is run by Raya Software Limited, 41 Walnut Close, Kingswood, Dublin 24, D24 FHV0. We are the controller of the personal data described here. Questions or requests: privacy@lasttable.ma.
When you book, the restaurant also receives your booking details and is responsible for how it uses them for its own records (see "What the restaurant receives").
What we collect
Your mobile number, which we verify with a one-time SMS code. It is your login and where we send booking confirmations.
Your name and, for each booking: the restaurant, date, time, party size, any occasion or special request you add, any offer used, and what happened (attended, cancelled or no-show).
Preferences you choose to give: dietary and seating preferences, a default occasion, saved places and your notification settings.
Cancellation Radar watches, and the alerts we send you (and whether you opened them).
If you turn on notifications: your device's push token, platform and app version.
If you use Near me, the map's location button or Sort: Nearest, the app uses your phone's location to measure distances. It stays on your phone: we don't store it or link it to you, and a search sends our server only a rounded position (about 100 m), which is not kept.
We do not collect your contacts or photos, we do not use advertising identifiers, and we do not track you across other companies' apps or websites.
If you use voice in “Ask LastTable”: what you say, as audio and as text, and anything it contains. What you say can reveal things about you, such as a diet or a health condition, so only say what you are happy to share.
Kept only on your phone
So that "For you" works before you sign in, the app keeps a taste profile on your phone: venues you viewed, cuisines and areas you searched, usual party size and time, and a summary of your bookings. It contains no name or phone number and is not sent to us.
When you sign in, your saved places and dietary and seating preferences are copied to your account. You can switch personalised recommendations off, or clear this data, in Notifications & privacy.
Why we use it and on what legal basis
To make and manage your bookings, send confirmations, reminders and changes, and run Cancellation Radar: this is needed for our contract with you (GDPR Art. 6(1)(b)).
To verify your number, prevent fraud and repeated no-shows, and keep the service secure: our legitimate interests (Art. 6(1)(f)).
To charge restaurants our fee for new diners who book through LastTable and attend, and to keep accounting records: our legal obligations (Art. 6(1)(c)) and legitimate interests.
Personalised recommendations: our legitimate interest in showing you relevant restaurants. You can switch them off at any time.
Flash Table alerts and news and offers from LastTable: only with your consent (Art. 6(1)(a)). Both are off until you turn them on, and you can withdraw consent at any time in the app.
Dietary preferences (for example halal or gluten-free) can say something about your religion or health. They are optional and we use them only to suggest suitable restaurants and pre-fill your booking.
To show maps: our legitimate interest in showing you where restaurants are (Art. 6(1)(f)).
Anonymous usage counts: the app sends us counts of how often people search, open a restaurant, hold a table, and confirm or cancel a booking, so we can see where booking gets difficult and fix it. They are added up into daily totals with no account, device or location attached, so they cannot identify you, and they are never used for advertising or tracking: our legitimate interest in improving LastTable (Art. 6(1)(f)).
To find tables and answer you when you choose to use voice in “Ask LastTable”: this is needed to provide what you asked for (Art. 6(1)(b)). You can always type instead.
What the restaurant receives
The restaurant you book receives your name, phone number, date, time and party size, and any occasion or special request you add. It uses them to prepare for your visit and may contact you about your booking.
The restaurant can also see whether you are a new guest through LastTable, because it pays us a fee for new diners. It does not see which other restaurants you booked, your saved places or your preferences.
Restaurants can also use LastTable to run a waiting line for people at the door. If a restaurant adds you to its line, its staff type your name and, if you give it, your phone number and a short note. The restaurant decides how this is used and is responsible for it; we store it for the restaurant only to run the line, and delete it 30 days after your place in the line ends. If you are seated, your visit becomes part of the restaurant's own booking records.
If you join a restaurant's waiting line in the app (Skip the Queue), the restaurant sees the name you give for the host, your party size and your place in the line. Your phone number stays hidden in the line.
Restaurants you book see a reliability summary of your LastTable bookings: visits, no-shows and late cancellations in the last 12 months, as counts only.
Sales partners and agents
If you apply to be a LastTable sales agent or partner, we collect what you enter in the form: your name, mobile number, email, city or area, languages, how you would find restaurants, how you heard about us, and for a company its name, trading name, company number, website and team size. We also record that you accepted the partner terms and which version.
We use this to review your application, contact you about it and, if you are approved, set up your agent or partner account, track the restaurants you refer and pay your commission. This is needed to take steps towards, and then carry out, our contract with you (Art. 6(1)(b)). To stop abuse of the form we keep a scrambled (hashed) version of your IP address for 30 days: our legitimate interests (Art. 6(1)(f)).
Your bank details are entered later, in LastTable Partners, not in the form. They are encrypted, shown masked, and only a LastTable administrator can see them in full, to pay you; every time this happens it is logged. If they change, we email you and wait 48 hours before paying into the new account.
Only LastTable's operations team sees applications. If you work for a partner company, that company's admins see your name, contact details, referral results and the payouts made to the company. We delete rejected or withdrawn applications 90 days after the decision. If you are approved, we keep your record while you work with us; payment records are kept for as long as accounting law requires. When someone clicks your referral link we count it using scrambled network data, deleted after 90 days.
Who helps us run LastTable
Supabase: our database, sign-in and server functions, hosted in the European Union.
Twilio Ireland Limited: sends verification codes and booking text messages.
Google Firebase Cloud Messaging (and Apple Push Notification service on iPhone): delivers notifications you turned on.
RevenueCat, Apple and Google handle in-app purchases made by restaurants in LastTable Business; Stripe handles restaurant payments on the web. When a restaurant asks for a deposit or a pre-order, or you buy a LastTable gift card, Stripe processes the payment; your card, Apple Pay or Google Pay details are held by Stripe, and LastTable keeps only the amount and a receipt link, never your card details.
Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
We never sell your personal data.
Booking confirmations: when a booking is made, changed or cancelled, we send you the details by email through Google Workspace (Gmail) (if your account has an email address, for example after signing in with Apple, Google or email) and, where switched on, by text message to the number on the booking.
Anthropic: when you use the AI Concierge, the request you type or say (your spoken words are turned into text first, and any e-mail addresses or phone numbers are removed) and the live availability we look up for it are sent to Anthropic's AI model to write the answer. We don't add your name, phone number, e-mail address or location, but anything else you type or say is included. Anthropic doesn't use this data to train its models.
MapTiler: draws the maps in the app. To show a map, your phone asks MapTiler for the map squares on your screen. MapTiler sees your IP address and which area of the map you are looking at, which can be near you if you used Near me. We don't send your name, phone number, account or exact location. The map data comes from OpenStreetMap; if MapTiler is unavailable, the app loads the map from the OpenStreetMap Foundation's servers instead, which see the same.
HeyGen (LiveAvatar) and LiveKit: if you start a video call with Raya in “Ask LastTable”, the call is streamed through LiveKit Cloud and the video host is provided by HeyGen. They receive what Raya says, as text or as generated audio, and technical connection data such as your IP address. We don't send them your microphone, your camera or your account details: during a video call, what you say is recognised by your phone's own speech service, which on some phones and browsers sends the audio to Apple or Google. Calls last a few minutes at most and LastTable doesn't record them. When a call ends we ask HeyGen to delete its copy of what Raya said.
ElevenLabs: when you start a voice call with Raya in “Ask LastTable”, your microphone audio goes directly from your phone to ElevenLabs and its service providers, including the one that carries the audio and the provider of the AI model that writes Raya’s replies. They recognise your words, write the reply and speak it. Everything you say is included, so avoid saying anything you would rather not share; people near you may be heard too. The call may be recorded, and ElevenLabs may keep the audio and a written transcript on LastTable’s account. We tell you this before your first voice call, and you can always type instead. Outside a voice call, where cloud speech is available, Raya’s reply text is sent to ElevenLabs to turn it into speech. LastTable’s own database holds neither the audio nor the transcript, only a scrambled technical reference to each call.
How long we keep it
Your account, preferences and saved places: until you delete your account.
When you delete your account, your bookings stay with the restaurant and in our fee records without your name, phone number, occasion or request, for as long as accounting law requires. Upcoming bookings are cancelled.
Notification history: 13 months. Verification codes expire within minutes.
Voice calls in “Ask LastTable”: how long ElevenLabs keeps a recording or transcript depends on the settings and terms agreed for the service; this is not a promise of zero retention. LastTable keeps a scrambled technical reference to each call, with no audio or text, for a limited time.
Your rights
You can ask to access, correct, export or delete your data, to restrict its use, and object to uses based on our legitimate interests. You can withdraw consent at any time.
In the app: Profile → Privacy & your data → Download my data, or Delete account. Or email privacy@lasttable.ma. We reply within one month.
You can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 (www.dataprotection.ie).
Age
LastTable is for people aged 16 and over.
Changes
If we change this notice in a way that matters, we will tell you in the app before the change applies.
This website
This website sets no cookies and loads no third-party trackers, advertising or social media scripts. Fonts and images are served from our own domain. Our hosting provider keeps standard server logs (such as IP address and pages requested) for security and to keep the site running.
If you use a form on this site (pilot invite or pilot restaurant), we receive what you enter and use it only to reply to you about the pilot. Write to privacy@lasttable.ma to have it deleted.