Privacy notice · Updated 13 October 2026
Your details, kept simple.
We collect only what we need to reply to you and to run our mystery-guest programme. We never sell your data.
Who we are
OneTwoGuest runs mystery-guest visits for restaurants and cafés in Dubai. Our company registration is in progress; this notice will name the registered entity once it is complete. Contact: hello@onetwoguest.com.
What we collect
- Restaurants: your name, venue and WhatsApp number from the trial-visit form.
- Guest Club: your first name, area, WhatsApp number and your confirmation that you are a UAE resident aged 21+.
- We do not ask for your Emirates ID on this website. If you join the Guest Club, we verify it later and keep only the result of the check, never a scan.
Why we use it
To reply to you, arrange a trial visit, and run the Guest Club. We rely on your consent under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). You can withdraw it at any time.
Where it is processed
We use tools such as WhatsApp, Google Workspace and other cloud services, which may process your details outside the UAE.
How long we keep it
Up to 12 months after our last contact with you, or until you ask us to delete it, whichever comes first.
Your rights
You can ask to see, correct or delete your details, or stop hearing from us. Write to hello@onetwoguest.com or message us on WhatsApp.
Visit reports
Reports are private to the venue owner and the managers they add. Guests photograph dishes, interiors and receipts only: no faces, no audio, no public reviews.
This notice is a plain-language summary and will be reviewed with our legal advisers before paid services begin.