Last updated 7 September 2026
This policy covers the website at dubaitable.com, its venue booking sub-sites, and the Dubai Table iPhone app. It is written to describe what the software actually does rather than to cover every theoretical case.
The short version. We use optional Google Ads measurement only when you allow it. We do not sell your data to data brokers. When you create a profile, we store the details you choose to save so they are available across devices. Booking requests and profile details are processed on our Cloudflare infrastructure. We use essential sign-in cookies to keep you signed in.
Rize Group FZ-LLE, Dubai, United Arab Emirates, trading as Dubai Table, is the controller of the personal data described here.
For anything in this policy, including access and deletion requests, contact Amjad Razek at [email protected].
The website uses browser local storage, and the app uses the equivalent on-device storage for local drafts and display preferences. Submitted bookings and saved account profiles are stored separately on our servers. Clearing your browser data, or deleting the app, clears local data but does not delete server records.
| What | Why |
|---|---|
| Your itinerary — venues, dates, guest counts | So it survives a page reload |
| Free-text notes you add to an itinerary | So they are there when you send it |
| Theme and language choice | So the site opens the way you left it |
| App: your name and email from Apple or Google sign-in | To attach to booking requests you send |
| App: a cached copy of the venue directory | So the app works without a connection |
Messages you type into the chat are sent to our server and on to OpenAI to generate a reply. Whatever you type is included, so if you give a name, a phone number or an occasion, that goes too. We do not store the conversation: it exists for the length of the request and is not written to any database of ours. OpenAI processes it under their own terms and retains it according to their policy.
Your IP address is briefly counted at our edge to rate-limit abuse of that endpoint. The counter holds a number, not a log of what you asked, and expires within the hour.
When you submit a booking form, we store your contact details, venue, date, guest count and requests to arrange your booking. We send a receipt by email and WhatsApp updates where you opt in. If you choose a WhatsApp link instead, WhatsApp opens with a draft; it is sent only when you press send there. We share the booking details needed to arrange your request with the reservation desk and venue.
Signing in is optional. You can sign in by email code or, when available, Google or Apple. We verify your email and store your account identifier, name, email, phone, city, country, booking preferences and the profile photo you choose to upload. Dubai Table and Rize Lists share the account store; request history is shown for the site you are using.
We use these details to prefill booking forms and show requests associated with your verified email. Saved preferences are included in booking requests when you submit them. Your profile photo is private to your account and is not a public listing. Only the image you select is uploaded; we do not access your photo library.
Essential secure session cookies last up to 30 days. Signing out revokes that session; it does not delete your saved profile or booking records. Email codes expire after 10 minutes. Sign-in attempts are rate-limited using hashed email and IP-based counters. We do not receive your Google or Apple password. If you use Apple's Hide My Email, we receive its relay email address.
We keep saved profile details until you request deletion. You can edit your details and remove your photo in your profile. Contact the address in this policy to request account deletion; booking and payment records may be retained where necessary for the reservation or applicable recordkeeping requirements.
On our public booking page, you can allow or reject Google Ads measurement using Cookie choices. Until you allow it, this integration does not load the Google tag or send measurement signals to Google. If you allow it, Google receives ad-click and technical browser information and a signal when a table request is successfully saved, with a random request identifier to prevent duplicate counting. Google may set advertising measurement cookies. We do not include your name, email, phone, booking notes or venue details in that event, and enhanced conversions and personalized advertising are disabled.
Your choice is saved on this browser for up to 180 days. You can change it using Cookie choices. Rejecting measurement does not affect booking or sign-in. Measurement describes a submitted request, not a confirmed reservation or payment. See Google’s information about data use.
Where a venue page takes a deposit, payment is handled entirely by Stripe on Stripe's own checkout. Card details are entered on Stripe's systems and never reach ours. We receive only the confirmation that a payment succeeded and the booking reference attached to it.
| Who | What | When |
|---|---|---|
| OpenAI | Your chat messages | Only if you use the concierge chat |
| Meta (WhatsApp) | The booking message you send | Only when you press send |
| Stripe | Payment details | Only if you pay a deposit |
| Apple / Google | Sign-in only | Only if you choose to sign in |
| Cloudflare | Hosting and delivery | Always, as infrastructure |
| Matterport | The 360° tours embedded on venue pages | Only when you open a tour |
| The venue | Your name, date and party size | When we arrange your booking |
We do not sell personal data, and we do not share it for anyone else's marketing.
Some of those providers process data outside the United Arab Emirates, principally in the United States and the European Union. Where that happens it is because the service is necessary to deliver what you asked for — a chat reply, a payment, a message — and it is carried out under the provider's own contractual safeguards.
Under the UAE Personal Data Protection Law, and under the GDPR where it applies to you, you may ask us to give you a copy of the personal data we hold, correct it, delete it, restrict or object to how we use it, or withdraw consent you previously gave.
Your saved website profile and submitted booking requests are stored by us. Local itinerary drafts and display preferences may also remain on your device. For anything held by us, including your account, profile and booking requests, write to [email protected] and we will respond within 30 days. You may also complain to the UAE Data Office.
This service is for adults. Many of the venues listed are licensed premises with a minimum age of 21. We do not knowingly collect data from anyone under 18.
If this policy changes materially we will update the date at the top and, where the change affects you, say so in the app or on the site.