Privacy notice · Updated 15 October 2026
Your details, kept simple.
We collect only what we need to reply to you and to run our mystery-guest programme. We never sell your data.
Who we are
OneTwoGuest is developing a mystery-guest service for restaurants and cafés in the UAE and the United States. Our company registration is in progress; this notice will name the registered entity once it is complete. Contact: hello@onetwoguest.com.
What we collect
- Restaurants: your name, venue and WhatsApp number from the call-request form.
- Call bookings: your name, email address and selected time through Google Calendar. The booking form may also ask for your restaurant name, WhatsApp number and number of locations.
- Guest Club: your first name, area or city, WhatsApp number, selected market and your confirmation that you are a resident of that market aged 21+.
- We do not ask you to upload identity documents on this website. If further identity or eligibility checks are needed before a visit, we explain them separately.
Why we use it
To reply to you, arrange a call and paid visits, and run the Guest Club. When you submit a form, you consent to being contacted about your request. You can withdraw that consent at any time.
Where it is processed
Calls are booked through Google Calendar and held on Google Meet (Google Workspace). We also use WhatsApp and other cloud services. These providers may process your details outside your country of residence.
Website analytics
We measure visits to public pages, selected market, broad device type, campaign source and booking-button clicks. We store a referring website’s hostname, not its full address. Random identifiers in your browser tab’s session storage connect these events; a new session starts after 30 minutes of inactivity. These are anonymous browser-tab counts, not a count of identifiable people. We do not use analytics cookies or store raw IP addresses in these events.
First-party measurement respects Do Not Track and Global Privacy Control. Private reports, guest mission pages and admin pages are excluded. Analytics events are kept for up to 90 days and removed during routine cleanup. Form submissions are recorded separately and may be linked to the visit session, so we can understand which campaigns generate requests. Clicking a calendar link does not tell us whether you completed a booking.
How long we keep it
Up to 12 months after our last contact with you, or until you ask us to delete it, whichever comes first.
Your rights
You can ask to see, correct or delete your details, or stop hearing from us. Write to hello@onetwoguest.com or message us on WhatsApp.
Visit reports
Reports are private to the venue owner and the managers they add. Guests photograph dishes, interiors and receipts only: no faces, no audio, no public reviews.
This notice is a plain-language summary and will be reviewed with our legal advisers before paid services begin.