img
img

Privacy Policy

Last updated: September 19, 2026

This policy explains what personal information Tayari collects, why we collect it, who we share it with, and the choices you have. It applies to the Tayari booking platform, the public booking pages we host for venues, and the booking confirmation messages we send.

Who we are and how this policy works

Tayari (“Tayari”, “we”, “us”) provides booking and reservation software to businesses such as restaurants, hotels, arcades, and entertainment venues. We are based in Pakistan and can be reached at info@tayaripk.com.

There are two different groups of people in this policy, and the distinction matters:

  • Venues — the businesses that sign up for Tayari and use our dashboard to manage their bookings. For information about venue staff accounts, Tayari is responsible for that data.
  • Guests — the people who book through a venue’s public booking page. Here the venue decides what to collect and how to use it. Tayari processes that information on the venue’s behalf and under its instructions.

If you are a guest and want your information corrected or deleted, the fastest route is usually to contact the venue you booked with directly. You can also contact us and we will help, or pass your request on to the venue.

Information we collect

Booking information from guests. When you make a booking, we collect the details the venue has chosen to ask for. This can include your name, phone number, email address, party size, the date and time you selected, any service or preference options you picked, and any notes you add. Some of these fields are optional and are set by each venue.

Booking history. We keep a record of bookings associated with you at a venue, including changes such as a reschedule or cancellation, whether you were marked as having arrived, and the payment status of the booking. Venues use this to run their business and to recognise returning guests.

Notification preferences. We record which channel you chose to be contacted on for a booking — WhatsApp, email, or neither — and, separately, whether you have agreed to receive marketing from a venue. Marketing consent is off unless it is switched on.

Venue account information. For venue staff we collect an email address and a password, the role assigned to the account, and the settings configured for the business, such as its name, address, phone number, logo and images, opening hours, and pricing.

Technical information. Our hosting and infrastructure providers process standard server logs, including IP address, browser type, and the pages requested, in order to serve the site and keep it secure.

We do not ask for, and have no use for, government identification numbers, precise location data, or any special categories of sensitive personal information.

How we use information

  • To create, confirm, change, and cancel bookings, and to show venues the bookings they have received.
  • To send booking messages you have asked for, such as a confirmation, a reminder before your slot, or a notice that a booking was changed or cancelled.
  • To calculate prices and availability, including how many places remain for a given time slot.
  • To let venue staff sign in securely and manage only their own venue’s information.
  • To keep the service working and secure, including diagnosing faults and preventing abuse.
  • To comply with legal obligations that apply to us.

We do not sell personal information. We do not share it with advertising networks, and we do not use it to build advertising profiles.

WhatsApp and email messages

The messages Tayari sends are transactional: they are about a booking you made. Specifically, we send a booking confirmation, a notice when a booking is rescheduled or cancelled, and a reminder before your booking time. Venues choose which of these are enabled.

When you book, you choose the channel you want to be contacted on. If you select “Don’t notify”, we do not send you booking messages on any channel. Your phone number is used to send WhatsApp messages only where you provided it for that purpose and selected WhatsApp as your channel.

WhatsApp messages are delivered using the WhatsApp Business Platform provided by Meta. Your phone number and the contents of the message are shared with Meta in order to deliver it, and Meta handles that information under its own terms.

To stop receiving messages, reply to a WhatsApp message asking to stop, contact the venue, or email us at info@tayaripk.com. Marketing messages, where a venue sends them, are separate from these booking messages and require your consent.

Cookies and browser storage

We use a small number of strictly necessary technologies, and we do not use advertising trackers or sell data to third parties.

  • A session cookie that keeps venue staff signed in to the dashboard. Without it the dashboard cannot work.
  • Local storage in your browser that remembers the items in your booking cart before you check out, so you do not lose your selection if the page reloads. This stays on your device.
  • A preference for light or dark appearance, stored on your device.

We do not currently use analytics cookies, so there is presently no tracking to opt out of. We may introduce analytics in future to understand how the service is used and to improve it. If we do, it will be limited to measuring usage in aggregate — never to advertising, profiling, or sale of personal information — and we will update this policy, and the date at the top of it, before doing so.

Who we share information with

We share personal information only with the service providers we need in order to run Tayari, and only so they can perform that service for us:

  • Supabase — database, account authentication, and file storage for images.
  • Vercel — application hosting and delivery.
  • Meta Platforms — delivery of WhatsApp messages.
  • Resend — delivery of email messages.

We also share a guest’s booking information with the venue that guest booked with, which is the whole purpose of the service.

We may disclose information where we are legally required to, where it is necessary to protect the rights or safety of people or of Tayari, or, if our business is ever sold or reorganised, to the party taking it on. We would remain bound by this policy in that case, and we would tell you before your information became subject to a different one.

Payments

Where a venue takes payment at the time of booking, card details are entered on the payment provider’s own secure checkout page. Tayari does not receive, process, or store card numbers, expiry dates, or security codes at any point.

What we store against a booking is the amount, the currency, whether the payment succeeded, failed, or is outstanding, and the reference the payment provider gave us so the payment can be matched to the booking.

How long we keep information

We keep venue account information for as long as the venue has an account with us, and for a reasonable period afterwards to deal with any questions, disputes, or legal obligations that follow.

We keep guest booking information for as long as the venue needs it to run its business, since venues rely on booking history to recognise returning guests and understand their trade. Venues can delete a guest’s information from their dashboard, and we will delete it on request as described below.

Temporary records created by the booking process, such as the short hold placed on a slot while you are checking out, expire automatically.

Where your information is stored

Tayari is operated from Pakistan, but the providers listed above host and process information on servers outside Pakistan. By using the service you understand that your information will be stored and processed in other countries, which may have different data protection rules than your own. We choose established providers and rely on the protections in their own terms.

Security

Access to venue data is restricted to that venue’s own staff accounts and enforced in our database itself, not only in the interface. Passwords are stored hashed by our authentication provider and are never visible to us. Traffic to the service is encrypted in transit.

No system can be guaranteed completely secure. If we become aware of a breach affecting your personal information, we will act promptly and notify those affected where it is appropriate or required to do so.

Your choices and rights

You can ask us to:

  • Tell you what personal information we hold about you.
  • Correct information that is wrong or out of date.
  • Delete your information, where we are not required to keep it.
  • Stop sending you messages, or change the channel we use to contact you.

Email info@tayaripk.com and we will respond within a reasonable time. We may need to confirm your identity first, and where the request concerns information held on a venue’s behalf, we will pass it to that venue and support them in answering it.

Children

Tayari is not directed at children, and we do not knowingly collect personal information from children. Bookings should be made by an adult, who may of course include children in the party size for a booking. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as the service changes. When we do, we will revise the “last updated” date at the top of this page. If a change materially affects how we use your personal information, we will take reasonable steps to tell you.

Contact us

For any question about this policy or about how your information is handled, email info@tayaripk.com.