Privacy Policy
Last Updated: 2024-11-01
Introduction
Winniey ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital menu service. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
For the purposes of UK GDPR, Winniey is the data controller responsible for your personal data. Our contact details are:
- Company Name: Winniey
- Email: winnieylimited@gmail.com
- Address: United Kingdom
Information We Collect
We collect information that you provide directly to us and information that is automatically collected when you use our service.
Personal Data You Provide
- Name and contact information (first name, last name, email address, phone number)
- Account credentials (email address and encrypted password)
- Phone number for account verification and communication
- Payment information processed securely through third-party payment processors
- Restaurant information (name, address, opening hours, menu content)
Automatically Collected Data
- IP address and location data
- Browser type and version
- Device information (type, operating system)
- Usage analytics and menu viewing statistics
Restaurant Content Data
- Menu items, categories, descriptions, and prices
- Images uploaded for menu items and categories
- Restaurant settings and preferences
Legal Basis for Processing
Under UK GDPR, we process your personal data based on the following legal grounds:
- Consent - When you have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications)
- Contract - When processing is necessary for the performance of a contract with you (e.g., providing our digital menu service)
- Legal Obligation - When we need to comply with a legal obligation (e.g., tax and accounting requirements)
- Legitimate Interests - When processing is necessary for our legitimate interests (e.g., improving our service, security, fraud prevention), provided these interests do not override your rights
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our digital menu service
- To communicate with you about your account, service updates, and customer support
- To process payments and manage subscriptions
- To analyze usage patterns and improve our service functionality
- To detect, prevent, and address technical issues, fraud, and security threats
- To comply with legal obligations and enforce our terms of service
Data Sharing and Disclosure
We do not sell your personal data. We may share your information only in the following circumstances:
Service Providers
- Cloud hosting and infrastructure providers
- Payment processors (Stripe) for secure payment handling
- Analytics services to understand service usage
- Email service providers for transactional and marketing communications
All service providers are contractually obligated to protect your data and use it only for the purposes we specify. They are not permitted to use your personal data for their own purposes.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:
- Account data: Retained while your account is active and for 3 years after account closure for legal and tax purposes
- Payment records: Retained for 7 years as required by UK tax and accounting laws
- Marketing consent: Retained until you withdraw consent or object to processing
- Legal claims: Retained as necessary to establish, exercise, or defend legal claims
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access - You can request a copy of the personal data we hold about you
- Right to Rectification - You can request correction of inaccurate or incomplete data
- Right to Erasure (Right to be Forgotten) - You can request deletion of your personal data in certain circumstances
- Right to Restriction of Processing - You can request that we limit how we use your data
- Right to Data Portability - You can request transfer of your data to another service provider
- Right to Object - You can object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent - Where processing is based on consent, you can withdraw consent at any time
To exercise any of these rights, please contact us at winnieylimited@gmail.com. We will respond to your request within one month, or within two months if the request is complex.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience:
- Essential Cookies - Required for the service to function (e.g., authentication, security)
- Analytics Cookies - Help us understand how visitors use our service (you can opt-out)
- Marketing Cookies - Used to deliver relevant advertisements (you can opt-out)
Ezoic Services
This website uses Ezoic, an advertising service provider. Ezoic and its partners may collect and use information about your visits to this and other websites to provide personalized advertisements. For more information about Ezoic's data collection and use practices, please see Ezoic's privacy policy below:
Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption of data in transit (SSL/TLS) and at rest
- Access controls and authentication mechanisms
- Regular security monitoring and vulnerability assessments
- Regular software updates and security patches
International Data Transfers
Your data may be transferred to and processed in countries outside the UK/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place.
We rely on adequacy decisions, Standard Contractual Clauses (SCCs), or other approved transfer mechanisms to ensure your data receives adequate protection.
Children's Privacy
Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our service after such changes constitutes acceptance of the updated policy.
Contact Us and Complaints
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: winnieylimited@gmail.com
- Address: United Kingdom
You also have the right to lodge a complaint with the UK supervisory authority if you believe your data protection rights have been violated.
Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom. Website: https://ico.org.uk