Last Updated: 06 February 2023
Summary of how we use your data:
This website / app is operated by Ingredifind Limited (referred to in this notice as “we”, “us” or “Ingredifind”).
This Privacy Notice sets out how we process personal data of those who use our website and app and the Ingredifind service (together the “Website”).
It also describes your data protection rights, including a right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in the “Data Subject Rights” section below. Where we rely on your consent, such as for marketing purposes, you can withdraw this consent at any time.
What information do we collect?
We collect and process personal data about you when you interact with our Website including when you register as a user or because your restaurant will provide its ingredients details, when you upload or access information, participate in a promotion or in connection with an actual or potential business or employment relationship with us. The personal data that we process or may process includes:
your address, email address and phone number;
user name and password;
search terms entered into our Website.
information in relation to the entity through which you are engaging with us;
the name, price, food allergens, dietary preferences, and (any other) ingredients of dishes.
for end users:
your food allergens, dietary preferences, and (any other) ingredients you wish to search.
Your location (if you ask us to make searches for restaurants that you might like based on where you are)
your marketing preferences, including any consents you have given us;
information related to the browser or device you use to access our website.
How do we use this information, and what is the legal basis for this use?
We process this personal data for the following purposes:
As required by us and our group companies to conduct our business and pursue our legitimate interests, in particular to:
provide the Website functionality;
manage and maintain your account with us (whether you are an end user or a restaurant);
respond to your questions and comments and provide customer support (whether you are a restaurant or an end user);
for restaurants only – food allergens, dietary preferences, and any other specified ingredients data for all dishes will be stored and shared with end users;
help diagnose problems with our server, administer the Website, and compile broad statistical data;
enforce our terms and conditions or other legal rights;
we monitor use of our Websites, and use your information to help us improve and protect our Website;
we use information you provide to investigate any complaints received from you or from others, about our Website.
Where you give us consent:
to send you direct marketing;
for end users only – food allergens, dietary preferences, and any other specified ingredients data will be stored and shared with restaurants;
on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
For purposes which are required by law:
in response to requests by government or law enforcement authorities conducting an investigation;
complying with applicable laws and regulations.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.
Disclosure of your information to others
We do not sell, rent or trade your personal data to third parties. We may disclose your personal data in accordance with, and where permitted by, applicable law:
In order for us to comply with our legal obligations, e.g. where we are required to disclose certain information to tax authorities
To protect the security or integrity of our business, including our databases and systems
To any of our outsourced service providers or suppliers to facilitate the provision of contracted services or goods or to provide expanded services to our customers and website visitors
Outsource the processing of certain interactive website functions, administering email services, running special promotions and managing any rewards partners
For the purposes of a joint venture, collaboration, financing, sale, merger, reorganisation, change of legal form, dissolution or similar event
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business
To any other third party where you have provided your consent
International transfer of personal data
When data is shared with subsidiaries or associated offices in the Ingredifind group or third party service providers whom we use, your data may be transferred to countries which do not have the same level of data protection laws as those in the country where you are located. In particular, we use service providers in the US to assist with the managing and hosting of our Website. We use legal mechanisms, including Standard Contractual Clauses, to help ensure that your rights and protections are guaranteed when the data is transferred. Please contact us at the contact details below if you want to receive further information regarding international data transfers.
a. What are cookies?
b. What cookies do we use and what information do they collect?
Required cookies: these cookies are required to enable core functionality. Without these cookies, services you have asked for, like identifying you while you are logged in, cannot be provided. If you disable these cookies certain parts of the website will not function for you.
Analytics cookies: these cookies help us improve or optimise the experience we provide. They allow us to measure how visitors interact with our website and we use this information to improve the user experience and performance of our platforms. These cookies are used to collect technical information such as the number of pages visited, which parts of our website are clicked on and the length of time between clicks. For example we use Mixpanel to better understand how customers use the Site.
c. Third parties
d. How do you manage these technologies?
We keep information collected from cookies for a maximum of 6 months.
If you want to delete any cookies that are already on your device, please refer to the help and support area on your internet browser for instructions on how to locate the file or directory that stores cookies. Different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers:
Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data- firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US
Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in- internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc
If you are using any other web browser, please visit your browser’s official support documents.
What rights do I have?
You have the right to ask us for a copy of your personal data; to correct, delete or restrict(stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in applicable data protection laws. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us – or our data protection officer – using the details set out below. If you have unresolved concerns, you have the right to complain to an EU, UK, or other data protection authority where you live, work or where you believe a breach may have occurred. This is the Information Commissioner’s Office in the UK.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can get in touch at firstname.lastname@example.org
8. How long will you retain my data?
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future.
Where we process personal data in connection with performing a contract, we keep the data for 6 years from your last interaction with us.