We are a registered data controller under the terms of the Data Protection Act 2018 and the General Data Protection Regulation. This means that we are responsible for, and control the processing of, the personal data that we collect about you. Our registered office address is at 5th Floor, 125 Princes Street, Edinburgh EH2 4AD.
Collecting your data
We collect data from you when you:
- visit our website;
- contact us through our website;
- contact one of our team directly;
- connect with us via social media platforms;
- subscribe to our monthly newsletter;
- interact with us at an industry event or trade show;
- report a problem about our website; and/or
- apply to a job with us through our website.
We collect transactional, payment and technical data from you to improve services.
- The personal data collected in the above manner may include your:
- phone number;
- e-mail address; and
- company name.
- We may also collect information about your use of our website including the URL that you came from, your IP address, browser type, browser location and the pages of our website that were viewed during your visit. This is statistical data and will not identify you.
- If you apply for a job advertised on our website, we will collect personal information provided to us from your covering letter and CV.
Uses of your data to improve services provided
We may use your personal data:
- in the normal course of our business, to allow us to register you to receive our services and to provide you with our services;
- to allow us to analyse your personal preferences and personalise our website to you;
- to communicate with you, where you have consented to receive communications from us or where you have previously bought or made an enquiry about our services. We will not send you marketing communications if you have opted out to receive marketing. You will be able to opt-out of such communications at any time by clicking the ‘unsubscribe’ link in any of our emails or by contacting us using the details at section 16 of this Policy;
- to notify you about changes to our services;
- to conduct research, statistical analysis and behavioural analysis;
- to improve our website services; and
- to comply with any legal obligations to which we are subject.
We will only use your personal data where we are permitted to do so by law and where:
- we need to use your personal data to enter into an employment contract with you;
- we need to use your personal data to comply with our legal obligations;
- you have given us consent to use your personal data (if consent is needed); and
- it is reasonable for us to do so and there is no disadvantage to you or risk to your personal data.
Sharing your information
- We will only share your personal data with:
- service providers and third party partners who process and store data on our behalf;
- payment providers;
- restaurants where you order from;
- customer support;
- professional advisors;
- taxation and legal authorities; and
- any member of our group, including our subsidiaries, our ultimate holding company and its subsidiaries.
- We may also share your personal data with third parties in the event that our business or substantially all of its assets are acquired by a third party, we are under a duty to disclose or share your personal data to comply with our legal obligations, we must enforce any contract with you, or we must protect our rights, property or the safety of our employees, customers or others.
Transfers of personal data outwith the UK
We may need to transfer your personal data outside the UK to countries where data protection laws may not provide the same level of protection as those in the European Economic Area (EEA). We will only transfer your personal data outside the EEA where either:
- the transfer is to a country which the EU Commission has decided ensures an adequate level of protection for your personal data; or
- we have put in place our own measures to ensure adequate security as required by data protection law. These measures include ensuring that your personal data is kept safe by carrying out strict security checks on our overseas partners and suppliers, backed by strong contractual undertakings approved by the relevant regulators such as the EU style model clauses. Some US providers may also be certified under the EU-US Privacy Shield which confirms they have appropriate measures in place to ensure the protection of your personal data.
Retention of personal data
- We will only keep your personal data for as long as it is needed for each of the purposes we have identified above. Usually, we will retain your information for the duration of your relationship with us unless we are required by law to retain your personal data for a longer period. We shall delete your personal data if you have not interacted with us after a period of 3 years.
- If you would like further information about how long we keep your personal data for, please contact us using the details at section 16 of this Policy.
Data protection laws give you a number of rights as set out below. If you would like to exercise any of your rights, please contact us using the details at section 16 of this Policy.
Right to object: You may object to our processing of your personal data. Please contact us using the details below, providing details of your objection. Upon receiving the request, we will contact you to tell you if we are able to comply or if we have legitimate grounds to continue. If data is no longer processed, we may continue to hold your data to comply with your other rights.
Right to access your personal data: You may request access to a copy of your personal data that we hold, along with information on what personal data we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making. You may make a request for access free of charge.
Right to withdraw consent: You may withdraw your consent at any time. Please contact us if you would like to withdraw your consent and we will delete your data in line with your right to erasure.
Right to rectification: You may ask us to rectify inaccurate information held about you. If the data we hold on you is out of date, incomplete or incorrect, you can inform us and we will ensure that it is updated. If you would like to update the data we hold about you, please contact us and provide the updated information.
Right to erasure: If you feel that we should no longer be using your data or that we are illegally using your data, you can request that we erase the data we hold. When we receive your request, we will confirm whether the data has been deleted or tell you the reason why it cannot be deleted.
Right to portability: You may ask us to provide you with the personal data that we hold about you in a structured, commonly used, machine readable format. You have the right to request that we transfer your data to another controller. Once we have received your request, we will comply where it is feasible to do so.
Right to make a complaint: You can make a complaint to us using the details at section 16 of this Policy. Alternatively, you may make a complaint to a supervisory authority, which for the UK is the Information Commissioner’s Office, by visiting their website at www.ico.org.uk, by phoning 0303 123 1113 (local rate) / 01625 545 745 (national rate), or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Keeping your personal data secure
We will treat all of your personal data in strict confidence and we will take all reasonable and appropriate steps to keep your personal data secure once it has been transferred to our systems. We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal data. Please note that whilst we take reasonable steps to prevent any breach, we cannot guarantee the security of any personal data you disclose to us online. You accept the inherent security risks of providing personal data and dealing online and will take all reasonable precautions to ensure that the security of the personal data you provide to use is not compromised.
Our website may contain links to other websites, not owned, associated or managed by us. Whilst we try our best to only link to reputable websites we cannot be held responsible for the security of information collected by sites not managed by us, nor can we accept responsibility or liability for them. We would recommend that you read the privacy information of the third party before using their website.
- recognise you whenever you visit this website (this speeds up your access to the website as you do not have to log in each time);
- obtain information about your preferences, online movements and use of the internet;
- carry out research and statistical analysis to help improve our content, products and services and to help us better understand our customer requirements and interests;
- target our marketing and advertising campaigns more effectively by providing interest-based advertisements that are personalised to your interests; and
- make your online experience more efficient and enjoyable.
- The table below provides some information on the cookies which we use on our website:
|Cookie Name||What it does||Why is it used||How long it lasts|
|_ga||Registers a unique ID used to generate statistical data on how the visitor use the website||2 years|
|_gat||Used by Google Analytics to throttle request rate||1 day|
|_gid||Registers a unique ID used to generate statistical data on how the visitor use the website||1 day|
|collect||Used to send data to Google Analytics about the visitor’s device and behaviour. Tracks the visitor across devices and marketing channels.||Duration of session|
|r/collect||Used to send data to Google Analytics about the visitor’s device and behaviour. Tracks the visitor across devices and marketing channels.||Duration of session|
- If you do not want to accept cookies, you can change your browser settings so that cookies are not accepted. If you do this, please be aware that you may lose some of the functionality of this website.
Uploading content to our social media platforms
- Please be aware that by uploading any photos or videos to our social media platforms, you are granting permission for us to use your images and/or videos and you agree that we have no obligation to reply to or share your content.
- If you upload content which identifies any third party, please note that this is personal data and the consent of the third party is required before any such content is uploaded.
Changes to this Policy
We may change this Policy from time to time and we would advise you to check it regularly. We will let you know when we make any material changes to this Policy by means of notice on our website homepage or if appropriate, by contacting you directly. This Policy was last amended on 12 November 2019.
If you have any questions about this Policy or our use of your personal data or you would like to exercise any of your data protection rights, please email us at email@example.com.