Local Foodie Privacy Policy

Table of Contents

• Contact details
• What information we collect, use, and why
• Lawful bases and data protection rights
• Where we get personal information from
• How long we keep information
• How to complain

Contact details

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

• Names and contact details
• Addresses
• Purchase or account history
• Payment details (including card or bank information for transfers and direct debits)
• Account information
• Information relating to loyalty programmes

We collect or use the following information for the operation of customer accounts and guarantees:

• Names and contact details
• Addresses
• Payment details (including card or bank information for transfers and direct debits)
• Purchase history
• Account information, including registration details
• Marketing preferences

We collect or use the following information for service updates or marketing purposes:

• Names and contact details
• Addresses
• Marketing preferences
• Location data
• Purchase or viewing history
• Website and app user journey information

We collect or use the following personal information for dealing with queries, complaints or claims:

• Names and contact details
• Address
• Payment details
• Account information
• Purchase or service history
• Customer or client accounts and records
• Financial transaction information

Additional Data Collection Services

In addition to the services described above, we use the following third-party services that may collect or process personal data on our behalf:

• Google Analytics 4 (GA4) for website usage analytics
• Stripe for processing payments securely
• Botpress for managing our customer support bot on WhatsApp

These services are used solely for the purposes of improving our service, facilitating transactions, and providing customer support.

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
• Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
• Your right to erasure – You have the right to ask us to delete your personal information. You can read more about this right here.
• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
• Your right to object to processing – You have the right to object to the processing of your personal data. You can read more about this right here.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • We collect and use personal information to provide our services and connect people with great local restaurants. This includes helping users discover nearby food spots, manage bookings, and receive relevant updates or offers. It also helps us support restaurant partners in reaching the right audience and delivering better service. This information allows us to make the experience more useful, personal, and efficient for everyone involved. We only collect what's necessary, use it responsibly, and implement safeguards to protect it. We believe the benefits—like easier discovery, smoother service, and stronger connections between local people and local businesses—outweigh any limited impact on individual privacy.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • We collect and use personal information to operate customer accounts and manage guarantees. This allows us to provide users with a secure, personalised experience, such as saving favourites, tracking orders, or managing bookings. It also helps us verify identities and prevent misuse of our services. These uses are essential for delivering a smooth and trustworthy service. We believe the benefits—such as improved security, better support, and a tailored experience—outweigh any minimal risks to individuals, especially since we only use this information for necessary and transparent purposes, and we protect it with appropriate safeguards.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • We use personal information to send service updates and relevant marketing—like letting users know about new restaurants, local food events, or special offers they might enjoy. This helps people get more value from Local Foodie and stay informed about things they've shown interest in. We believe this is a fair use of data, because we only send relevant content, people can opt out at any time, and we don't share their information with unrelated third parties. The benefit is a more useful and engaging experience, with minimal risk or intrusion on individual privacy.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • We collect and use personal information to respond to queries, resolve complaints, and handle claims. This helps us support users and restaurant partners effectively, fix problems quickly, and improve our service over time. We only use the information needed to look into the issue and provide a fair outcome. The benefit is a smoother, more responsive experience for everyone involved. We believe this outweighs any potential impact, as the data is handled securely, kept only as long as needed, and never used for unrelated purposes.

Where we get personal information from

• Directly from you

International Data Transfers

We do not transfer your personal data outside of the United Kingdom.

Cookies

We use cookies to enhance your experience. When you visit our site for the first time, you will be given the option to accept or decline the use of cookies. Some cookies are essential for site functionality, while others help us improve performance and user experience.

Data Security

We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. These measures include encryption, access controls, and regular reviews of our data handling practices.

Providing Your Personal Information

Some personal information is necessary for us to provide our services, such as your name, contact details, and payment information. If you choose not to provide this data, we may not be able to offer you certain features or complete transactions.

How long we keep information

We only keep your personal information for as long as we need it to provide our services, meet legal obligations, or deal with any disputes.

• Customer account information – kept while your account is active and for up to 12 months after it is closed
• Order and transaction details – kept for up to 6 years
• Messages, queries, and complaints – kept for up to 3 years
• Marketing preferences and consent records – kept for up to 6 years
• Restaurant partner information – kept while the partnership is active and for up to 6 years
• Website analytics and cookies – kept for up to 13 months

Managing Your Preferences

To opt out of receiving messages or updates, you may unsubscribe at any time through the WhatsApp bot. If you wish to delete your personal data from our systems, please email us at contact@localfoodie.uk.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy, you can also complain to the ICO:

Last updated: 31 March 2025