OpenTable Guest Data & Security

Restaurants own their data, and guests own their data.

Any data entered by a restaurant into their OpenTable system is owned by the restaurant, including any data collected when a diner makes a reservation over the phone or walking-in.

Diners that come to OpenTable’s consumer facing properties own their data. Since OpenTable is a consumer marketplace where millions of diners make reservations via OpenTable properties, we process a vast network of diners and diner-related information, which we will securely share with restaurants to enhance your business – as long as the diner grants us permission to do so. Gaining and maintaining diners’ trust is critical for OpenTable to service our restaurant partners with diner demand, and ultimately keeps restaurants compliant with privacy laws as well.

As long as guests grant OpenTable permission to share their information, we securely share it. By agreeing to OpenTable’s privacy policy, the diner grants OpenTable certain rights to use their data – including the right to share their data with restaurants. Any restrictions on what OpenTable can share with restaurants is determined by what scope of data the diner agreed to in OpenTable’s privacy policy.

Guests who book through OpenTable may opt out of certain data-sharing activities through their account preferences. In cases where guests choose to opt-out, OpenTable is required, by law, to honor guest choice about how their information is used and shared. This is a requirement for OpenTable to stay compliant with privacy laws, as well as protect restaurants from risk.

In the US, all guest email addresses are securely shared with restaurants, along with their email marketing opt-in status. This gives restaurants the information they need to remain compliant with consumer privacy laws along with the ability to email their guests while respecting their preferences. Marketing opt-in is always included with emails so you can avoid consumer complaints and any fines associated with local privacy laws. Diners will need to opt-out of a restaurant’s email marketing by unsubscribing in the marketing emails itself or contacting the restaurant.

OpenTable operates as a data processor, merely facilitating the reservation process and enabling guests to access restaurants for booking.

OpenTable’s use of a restaurant’s data is limited to the rights and permissions granted in the Client Agreement. That restaurant data is used for the limited purposes of promoting the restaurant on OpenTable properties, helping diners to make restaurant bookings, and enabling the restaurant reservation.

OpenTable also aggregates and anonymizes data to better service diners and restaurant partners.

All data received by the restaurant is handled in compliance with applicable data privacy laws and is processed and stored based on our robust, SOC 2 certified security program.