Privacy policy

This policy explains how Venuelift (“Venuelift”, “we”, “us”) handles personal information. Venuelift runs online booking pages and booking tools for restaurants, cafés and bars (“venues”). We follow the Australian Privacy Principles in the Privacy Act 1988. Venuelift is offered to venues in Australia for now. Guests from anywhere can book at those venues. Before we open in another country, we’ll add what’s different there to this policy.

The short version

• When you book a table at a venue that uses Venuelift, your name, mobile, email and booking details go to that venue so it can look after your booking. We store them for the venue.
• When you book online, we email you a confirmation, and again if you change or cancel from your link. The venue may also email you through Venuelift if it changes your booking.
• The venue only sends you news and offers if you tick the box to say yes. You can stop them at any time from the link in your booking email, or by asking the venue.
• We don’t sell your information, and we don’t share it with advertisers or social media companies.
• Your booking details are stored in Sydney. The companies that help us run Venuelift (Supabase, Vercel, Resend and Cloudflare) are United States companies, and emails and some processing happen in the United States.
• You can ask to see, fix or delete your information, or make a complaint, by emailing hello@venuelift.live.

If you book a table

What we collect

• Your name, mobile number and email address.
• Your booking: the date, time, number of guests and the venue.
• Anything you tell the venue in the notes, such as a birthday, allergies, dietary or access needs. Allergy, dietary and access needs can be health information, which the law treats as sensitive. Only include what you want the venue to know. It’s used only to look after you at the venue.
• Whether you said yes to news and offers from the venue, and when (or when you said stop).
• What happens to your booking, such as being seated, cancelled or marked as a no-show, and any notes the venue’s staff add.
• How you reached the booking page, if the link says so (for example, from the venue’s Instagram ad), so the venue can see which of its ads bring in bookings.
• A record of changes to your booking (for example, if you moved it or cancelled it), and of the emails we sent you about it.

Most of this comes from you, on the booking page. If you book by phone, in person or by email, the venue’s staff enter your details into Venuelift for you.

Why we use it

• To make your booking and hold your table.
• To send you booking emails, including a reminder shortly before your booking, with a private link where you can see, change or cancel your booking, and stop news and offers.
• So the venue can manage its bookings and contact you about yours. If the venue turns on alerts, we email it your booking details and notes when you book, change or cancel online.
• To show the venue how many bookings come from each of its ads and links. This is counted per booking; we don’t build a profile of you.
• If you said yes, so the venue can send you its news and offers by email. Those messages come from the venue, which must include a way to unsubscribe.
• To keep Venuelift secure and working, and to fix problems.

Who can see it

• The venue you booked, through its staff logins. The venue decides how it uses your details for its own purposes and has its own privacy obligations. If you have a question about how the venue uses them, ask the venue, or ask us and we’ll help.
• The companies that help us run Venuelift, only as needed to do that: Supabase (our database, hosted in Sydney), Vercel (website hosting), Resend (sending emails) and Cloudflare (the security check on our forms).
• Venuelift itself, only when needed to support the venue, fix problems or keep the service secure.
• Anyone we’re required to tell by law, such as a court or regulator.

Anyone with the private link in your booking emails can see and change that booking, so please don’t forward those emails.

If you run a venue on Venuelift

• We collect your email address and password when you sign up (passwords are stored in a scrambled form we can’t read), the details of your venue, and the email addresses of anyone you give a login.
• We use them to run your account, keep it secure, and contact you about the service. When you accept our terms, we record when.
• Your guests’ information is held by us for you. We only use it to provide Venuelift to you and as this policy describes. We never use one venue’s guests to market another venue.

If you sign up for early access

The early access form on our website asks for your name, email, phone and some details about your venue. We use them only to contact you about Venuelift.

Cookies and our website

We use only the cookies needed to keep venue staff signed in. The dashboard also remembers a few preferences in your browser (like whether the alert sound is on). We don’t use advertising or tracking cookies. Our hosting provider keeps standard technical logs (such as IP addresses and browser types) to keep the website secure.

To stop spam and fake bookings, our forms check that they weren’t filled in faster than a person could, and we count how often each connection, email address and phone number is used. We store those counts against scrambled codes rather than the details themselves, and delete them after a couple of days. Our forms also use Cloudflare Turnstile, a security check that looks at your browser and connection to tell people from bots. Most people never see it.

When something goes wrong on Venuelift, we keep a short record of the error (which page and what failed, with email addresses, phone numbers and private booking links taken out) for up to 30 days, so we can fix it.

Where your information is stored

Booking and account details are stored in a database in Sydney, Australia (Supabase). Our website is hosted by Vercel and our emails are sent by Resend. Both are United States companies, so information may be processed in the United States when pages load, and emails are processed and kept for a short time in the United States when they’re sent. Supabase is also a United States company. So is Cloudflare, which runs the security check on our forms. If you email us, your message is kept in our inbox, which Google hosts. We choose providers with strong security, and only share what they need to do their job.

Keeping it safe

All connections to Venuelift are encrypted. Each venue can only see its own bookings, and guests’ private links can’t be guessed. No system is perfectly secure, but if a data breach is likely to cause anyone serious harm, we’ll tell the people affected and the Office of the Australian Information Commissioner (OAIC).

How long we keep it

We keep booking details while the venue uses Venuelift, so it can look after returning guests. If a venue stops using Venuelift, we delete its bookings and its guests’ details within 90 days, unless the law requires us to keep them. A venue can ask us to delete a guest’s details at any time, and so can you. Early access sign-ups are deleted within 12 months if the venue doesn’t join. Venue accounts are deleted within 90 days of closing.

Seeing, fixing or deleting your information

Email hello@venuelift.live to ask what information we hold about you, to correct it, or to delete it. We may need to check it’s really you. We’ll reply within 30 days, and it’s free. You can also change or cancel a booking yourself from the link in your booking email.

Complaints

If you think we’ve mishandled your information, email hello@venuelift.live and tell us what happened. We’ll look into it and reply within 30 days. If you’re not happy with our answer, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

Children

Venuelift isn’t designed for children. Bookings should be made by an adult.

Changes to this policy

We’ll update this page when the way we handle information changes, and change the date at the top. If a change matters to venues, we’ll email them about it first.

Contact

Venuelift. Email hello@venuelift.live. Based in Western Australia, Australia.