Privacy & Cookie Policy
We take your privacy seriously and are committed to handling your personal data in a responsible and transparent way.
This Privacy Policy explains what information we collect, how we use it, how we keep it safe, and what your rights are.
1. Who We Are
TopTablePlanner is a trading name of Leyton Solutions Limited, a company registered in England and Wales, company Number 7022117. Our website helps users plan seating arrangements for weddings and events.
- For account and purchase data, we are the Data Controller
- For guest data you enter into seating plans, you are the Data Controller, and we are the Data Processor (see Data Processing Terms).
2. What Personal Data We Collect
Depending on how you use our site, we may collect:
- Your name and email address (when you sign up or contact us)
- Names and optional gender information for your guests (when using the planner)
- Browser type, and other anonymised usage data (for analytics and security)
We do not collect sensitive data such as race, religion, health, or biometric information.
3. How We Use Your Data
We use your data to:
- Provide access to your seating plan account
- Respond to enquiries and offer support
- Process purchases securely
- Improve our website and services (via anonymous usage analytics)
We will never sell or share your personal data with third parties for marketing purposes.
4. How We Store and Protect Your Data
We keep your data safe by:
- Using HTTPS to encrypt all communications
- Storing data on secure UK-based servers
- Taking daily encrypted backups stored separately from main data files
- Limiting access to authorised personnel only
If you delete your account, all associated data is deleted within 12 months. You can delete seating plans at any time.
5. Sharing Your Data
We only share your data with trusted third parties necessary to run our service, including:
- Krystal Hosting - our UK-based web hosting provider (Privacy Policy)
- Payment processor - for secure handling of transactions (you'll see their policy at checkout)
We never transfer your data outside the UK or EEA.
6. Your Rights
Under the UK GDPR, you have the right to:
- Access your personal data
- Correct or update inaccurate data
- Request deletion of your data
- Object to or restrict certain types of processing
To exercise any of these rights, please contact us.
7. Cookies
We use cookies to help our website function properly and to understand how it's being used, so we can improve the experience.
What We Use Cookies For:
- To keep you securely logged into your account
- To remember your preferences
- To track anonymous visitor statistics via Google Analytics
These cookies do not contain personal data like your name or email address.
We use Google Analytics with IP anonymisation enabled, which means that your full IP address is never stored or processed — helping to protect your privacy.
Blocking and Deleting Cookies
Use the settings below to manage your consents for the cookies used on this website.
You can also choose to block or delete cookies in your browser settings, though doing so may affect how the site works - especially account login functionality.
By continuing to use the site, you agree to our use of cookies as described here.
8. Links to Other Websites
Our website may contain links to other websites. Once you leave our site, please note that we do not have control over those websites or their privacy practices. We recommend reviewing the privacy policies of any third-party websites you visit.
9. Data Processing Terms
When you use TopTablePlanner to manage seating plans and input personal data such as guest names or genders, you are the Data Controller, and we are the Data Processor, as defined under the UK GDPR.
These terms are designed to meet the requirements of UK GDPR Article 28(3), which sets out the minimum obligations for data processors acting on behalf of data controllers.
We process this data solely for the purpose of delivering our service — specifically to host, store, and support your seating plan and guest list information — and only ever under your instructions.
Key Information:
- Lawful Basis for Processing: We process guest data on your behalf under the lawful basis of contract, following your instructions as the data controller in your use of the software - such as when you add or delete guests, save plans, or delete them.
- Security Measures: Our website uses HTTPS to ensure secure data transfer. We take daily encrypted backups which are stored separately from the main data files. All data is hosted in UK data centres certified to ISO 27001 (Information Security Management) and ISO 9001 (Quality Management).
- Subprocessors: We use a UK-based hosting provider, Krystal Hosting. Data is never transferred outside the UK or EEA.
- Data Retention: You can delete your seating plans at any time. Entire accounts and all associated guest data are automatically deleted 12 months after expiry. Rolling encrypted backups are retained for a maximum of 7 days before being deleted.
- Breach Notification: In the unlikely event of a personal data breach, we will notify affected users within 72 hours, as required by data protection law.
By using this service, you accept this Privacy Policy and agree to these Data Processing Terms.
10. Contacting Us
If you have any questions about this privacy policy or how we handle your data, please get in touch.
