1. About Us

1.1 Welcome to Served Technologies Ltd (referred to in this Policy as “we”, “us”, “our”, or “Served”). We are registered at Companies House under company number 15168512.

1.2 At Served, we understand the importance of your personal data, which encompasses all information about you that makes you identifiable. This ranges from the more apparent details like your name and contact information to the less visible ones, such as identification numbers, electronic location data, and other online identifiers (hereinafter referred to as “Personal Data”). Your privacy is paramount to us, and we are committed to safeguarding how your Personal Data is utilised and respected.

1.3 Served’s mission is to empower people with allergies to dine out safely while helping restaurants to cater for them. We respect and value the privacy of everyone who interacts with our platform, be it through our website, mobile applications, social media channels, or directly engaging with our services. Rest assured, we will only collect and use Personal Data in manners outlined in this Policy, upholding our responsibilities and your rights under the law.

1.4 As per the Data Protection Act 2018, the General Data Protection Regulation (”GDPR”) and other applicable data protection laws, Served Technologies Ltd is the ‘data controller’ of your Personal Data. This means we determine the purposes and means of processing your Personal Data, aligning with our vision to revolutionise the dining experience for people with dietary restrictions. Served Technologies Ltd is registered with the Information Commissioner's Office under registration number [Insert Registration Number], affirming our commitment to data protection and privacy.

1.5 This Policy should be read in conjunction with our additional service terms, which include, but are not limited to, our user terms and conditions, service agreements, and Cookie Policy. Together, these documents form the comprehensive guide to how we manage your Personal Data and protect your privacy.

2. What Personal Data do we collect?

At Served, we are dedicated to transparently managing how we gather information from our users and partner restaurants. Primary ways we collect data are detailed below.

2.1 Account Registration: We collect Personal Data when individuals and restaurants sign up for an account with our service. This may include, but is not limited to, names, contact details, and for individuals, specific allergy information that is crucial to providing our tailored dining solutions.

2.2 Mailing List Sign-Up: For those who opt to join our mailing list, we collect email addresses and potentially other contact information to send updates, promotions, and informative newsletters about our service and partners.

2.3 Usage Data Collection: When users interact with our service, such as searching for restaurants or applying allergy filters, we gather data pertaining to these interactions. This usage data helps us refine and improve our service offerings. Importantly, we do not collect personal information during these interactions unless it is provided to us directly by the user.

2.4 Other Sources: As our service grows and evolves, there may be additional ways we collect data, which will be aimed at enhancing the user experience and the breadth of our services. We will update our privacy policy accordingly to reflect these changes and ensure transparency.

Please be assured, we collect data in compliance with relevant data protection laws and only with the aim of enhancing our service and your experience with Served.

3. How do we process Personal Data?

At Served, we are dedicated to transparently managing how we gather information from our users and partner restaurants. Primary ways we collect data are detailed below.

3.1 Purpose and Basis: We process Personal Data to deliver and enhance our services, grounded in:

1. Compliance with legal obligations that govern our operations.
2. Legitimate interests for improving user experiences and service efficiency, balanced against the rights of the individuals.
3. Contractual necessities to fulfil our service commitments.
4. Consent from users for specific purposes.

‍

3.2 Legal Basis for Processing: Each processing activity of your Personal Data, such as service provision or marketing, is based on a specific legal basis including consent, contractual necessity, legal obligations, or our legitimate interests.

3.3 Data Management Principles: In processing Personal Data, we adhere to principles of data minimisation and accuracy, ensuring data is relevant and limited to what is necessary, and kept up-to-date.

3.4 Retention and Security: Personal Data is retained only as long as necessary for the purposes it was collected and is protected against unauthorised access, loss, or damage through appropriate technical and organisational measures.

3.5 Rights and Transparency: We uphold data subjects’ rights, offering transparency about data use and access to personal information upon request.

3.6 Responsible Sharing and Transfers: Data shared with third parties or transferred internationally is done under strict compliance with data protection laws, ensuring adequate safeguards.

4. How do we use Personal Data?

4.1 Service Provision: We use Personal Data to deliver our services, manage accounts, and ensure effective service operation.

4.2 Communication: Essential service updates and customer support are provided through the use of Personal Data.

4.3 Security: We monitor activities to maintain the security of our platform and comply with legal obligations.

4.4 Improvement: Data guides our efforts to enhance user experience and develop new features.

4.5 Marketing: With consent, we send relevant promotions and news, offering an opt-out option at any time.

4.6 Legal Compliance: Personal Data is used as necessary to fulfil our legal and regulatory responsibilities.

5. Who will your Personal Data be shared with, and where?

We are committed to protecting your personal data and only share it when necessary for providing our services, complying with legal obligations, or improving your user experience. This may include:

5.1 Partner Restaurants: To facilitate your dining experiences tailored to your dietary needs and for marketing purposes.

5.2 Service Providers: Third-party companies that support our business operations, such as payment processing and technical services, under strict confidentiality agreements.

5.3 Legal and Regulatory Authorities: When required by law or to protect our rights and safety, we may disclose data to government bodies or law enforcement.

5.4 Marketing Partners: With your consent, we may share limited data with trusted partners for targeted advertising.

We ensure all data sharing respects your privacy rights and is in line with applicable data protection laws.

6. Regulatory Compliance

We are committed to upholding the highest standards of data protection and privacy in accordance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. In addition, we ensure that our collection and use of Personal Data related to dietary preferences and allergens comply with food safety and information regulations. Our goal is to provide a secure and trustworthy platform for our users, respecting both their privacy and their right to accurate and essential food safety information.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse our website traffic, and understand where our visitors are coming from. By using our website, you consent to our use of cookies and similar technologies in accordance with this policy.

1. Essential Cookies: Necessary for the website’s functionality, enabling basic features like page navigation and access to secure areas.
2. Analytics Cookies: Help us understand how our website is being used, the effectiveness of our marketing campaigns, and customise our website to improve your experience.
3. Functional Cookies: Enable us to remember your preferences (such as language or location) and offer enhanced, more personalised features.
4. Advertising Cookies: Used to make advertising messages more relevant to you. They perform functions like preventing the same ad from continuously reappearing and ensuring that ads are properly displayed.

You have the right to choose whether to accept or reject cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. Be aware that disabling cookies may affect the functionality of this and many other websites that you visit.

For more information on managing cookies, please consult your browser’s help function. Please note that if you choose to disable cookies, it may limit your use of certain features or functions on our website and services.

8. How long will we hold your Personal Data and how will we keep it secure?

8.1 Retention of Data: We keep your Personal Data for as long as necessary to provide our services, and to comply with our legal obligations. Typically, this is for the duration your account is active plus up to five years afterward to manage post-service inquiries or legal requirements.

8.2 Data Transmission and Storage: Transmission of data over the internet cannot be guaranteed as entirely secure. Upon receiving your Personal Data, we employ strict security measures, including encryption and access controls, to safeguard your information stored on secure servers within the European Economic Area (EEA). Any transfer of your Personal Data outside the EEA is performed in accordance with GDPR, ensuring equivalent data protection standards.

8.3 Password Security: You’re responsible for maintaining the confidentiality of your account password and should not share it with others. Immediately notify us if you suspect your password has been compromised.

9. Telephone call monitoring

For quality assurance and training purposes, telephone calls to or from our service may be monitored or recorded. This helps us improve our customer service and ensure the accuracy of information exchanged.

10. Third-party links

Our website and services may contain links to third-party websites not operated by us. These links are provided for your convenience and information only. We are not responsible for the privacy practices or content of such third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Minors

11.1 Our services are intended for individuals over the age of 16. For those between the ages of 13 and 16, parental consent is required to process personal data.

11.2 We do not knowingly collect or solicit personal information from anyone under the age of 13. If we become aware that we have collected personal data from a minor without the requisite consent, we will take steps to remove that information promptly.

12. How can you access your Personal Data?

12.1 You have the right to request access to the personal data we hold about you, to ensure it is accurate and up to date.

12.2 To request a copy of your personal data, correct any inaccuracies, or update your information, please contact us using the details provided in the contact section of this policy. We are committed to providing you with reasonable access to your personal data and will respond to your request in accordance with applicable laws. We will respond to your subject access request in accordance with the ICO guidelines. Please see: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/ for more information.

13. What rights do you have regarding Personal Data?

At Served, we are dedicated to transparently managing how we gather information from our users and partner restaurants. Primary ways we collect data are detailed below.

13.1 You have several rights concerning your Personal Data, including:

1. The Right to Access: You can request access to your Personal Data and obtain a copy of it.
2. The Right to Rectification: If your Personal Data is inaccurate or incomplete, you have the right to have it corrected.
3. The Right to Erasure: Under certain conditions, you may request the deletion of your Personal Data.
4. The Right to Object: You have the right to object to the processing of your Personal Data in certain circumstances, including for direct marketing purposes.
5. The Right to Complain: If you believe your data protection rights have been breached, you have the right to complain to the ICO or your local data protection authority.

‍

13.2 Comprehensive information about your rights under the General Data Protection Regulation (GDPR) can be found at GDPR website. (https://gdpr-info.eu/)

14. Contact us

If you have any questions about this privacy policy, your Personal Data, or if you wish to exercise any of your data protection rights, please do not hesitate to contact us at:

Email: contact@served-app.com

We are dedicated to addressing any concerns regarding your privacy and data protection.

15. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We encourage you to review this policy periodically to stay informed about how we are protecting your Personal Data.

Last updated May 2024