Privacy
This notice tells you what TablePics keeps about you, why, who receives it, and for how long.
Are you in a photo that you want removed?
Tell us which album and which photo. We answer within five working days.
Ask to remove a photoA question about your data?
Write to our Information Officer. We answer within five working days.
privacy@tablepics.co.zaWhat we keep
| Who | What | Why |
|---|---|---|
| Guests | Each photo and video that you add, its file name and the time. Your name, if you type one. | To put your media in the album of the host. |
| Hosts | Your email address, the event name and date, the tier and the payment reference. | To sign you in, to send receipts and to run the album. |
| Everyone | Server logs with the IP address and the browser type. | To keep the service safe. |
A guest chooses to add media. The name is optional, and we ask guests for no email address. A host must give an email address to buy an album and to sign in.
Hosts get one session cookie after they sign in. We use no advertising cookie and no tracker.
How long we keep it
We delete each album when its time ends. The time starts on the event date:
- Essentials: 6 months.
- Full: 12 months.
A host can delete a photo or a video at any time. We delete each ZIP download after 7 days, and each server log after 30 days.
Who receives it
| Provider | What it does |
|---|---|
| Amazon Web Services | Stores the photos, the videos and the server logs in the European Union, and runs the app. |
| Cloudflare | Passes each request to the app, and sees the IP address of each visitor. |
| Neon | Hosts the database in the European Union. The database holds the host details and the guest names. |
| Paystack | Takes each payment. We never see the card number. |
| Resend | Sends each email to the host. |
The photos, the videos, the database and the email service are outside South Africa. Cloudflare can pass a request through a server in another country. Each provider must protect the data by contract or by law.
The host decides who sees the album. We sell no data, and we share no data for marketing.
Your rights
- You can ask to see the data that we keep about you.
- You can ask us to correct or delete it.
- You can object to how we use it.
- A parent or guardian can ask us to remove a photo of their child.
To remove a photo, use the removal form. We ask the host to act, and we remove the photo if the host does not act within 5 working days.
If our answer does not satisfy you, you can complain to the Information Regulator at inforegulator.org.za.
Contact
TablePics is responsible for the data of each host. The host is responsible for the media of each event, and TablePics keeps that media for the host.
Write to the Information Officer at privacy@tablepics.co.za.