Privacy Policy - UK

Overview

Welcome to me&u. This notice is relevant to personal data that me&u collects and use about anyone who uses me&u’s website and web or mobile applications (together, the “App”).

This notice explains how Me&u UK Trading Limited 1305 5559 and Me&u App UK Limited 1301 6888 (together “me&u”, “us”, “we”) collect, use, store and disclose your personal data when you use our App. 

We will update this notice from time to time in response to changing legal, regulatory or operational practices. We will provide notice of any changes (including when they take effect) in accordance with our legal obligations. To see when this privacy notice was last updated, please see the “Last modified” section at the outset. Please note that any third party websites or services that may be linked to our App are subject to their own privacy notices.

Collection of personal data 

We collect personal data about you in the following ways: 

Information you provide directly:

You may choose to provide us with personal data when you use our App or the services  made available via our App. 

• App Registration information: You provide personal data when you register for an account, place an order for services via the App, access the App or join either our or a venue’s mailing list. The personal data you provide may include your name, telephone number, email address, and payment information. 

• Ordering information: When you use the App to place an order from a venue that we support via the App, we may ask you to provide information about yourself including your: name; email address; mobile number; ordering information, and payment information (such as credit or debit card information).  We will also collect and store your approximate location based on the venue you are ordering from and retain historical ordering information to improve your user experience at that location and other locations in the future.
• Communications data: We collect the information you provide when you contact us for support or with questions. We collect personal data in these circumstances in person, over the telephone, on hard copy forms, and through letters and emails.  If you call us or interact with us over the phone, we may record or transcribe our conversations with you (including using AI). The information we will collect includes communication type, content, subject, sender, recipient, date and time. 
  

Information we collect automatically

When you use our App, we may collect personal data automatically. The types of information we collect automatically may include: 

• Device data: This is information relating to visits and usage of our App and services made available on our App from your device, such as your IP address, approximate geolocation (e.g. country / city-level), browser type, internet service provider, and content viewed (e.g. venues you are looking at or order selections you have made), orders made, interactions with third party apps, operating system, length of visit and referring website addresses.
  

We may collect some of this information using cookies (and  similar technologies). For more information about our use of cookies (and similar technologies), please see our  Cookie Policy | me&u. 

Information we collect from other sources:

• From discount, loyalty or other reward programs: We collect information from discount, loyalty or other reward programs you may be registered with where they are integrated with the App.  We do this so that you can use or apply the benefits of those programs or accrue benefits through them via the App. The type of personal data we will receive from these programs include: your full name, email and membership information and/or points information.
• We may also obtain certain information about you from other sources, or from third parties like the service providers who integrate with the App to the extent necessary to allow that integration and use the features of the App (for instance, where social media platforms have integrations directly into our App and we need to match your profile on the two platforms). We use this information in each case, only to the extent permitted by the GDPR. 
  

Special Categories of Personal Data (“SPD”):

‍We generally do not ask for, or collect SPD (which is a type of sensitive information like health data) about you, unless you provide it to us voluntarily. You may provide allergy information with an order by expressly selecting the allergen checkbox at checkout via the App. We do not store this information so you will need to provide allergy information with each order. You don’t have to give us all the information we ask you to provide, but this may limit how we interact with you, and which services we can provide.

Use of your personal data 

We use your personal data for the following reasons:

• To provide the App and services to you: We will use your personal data to provide and administer our App, including to maintain any account you have with us, to process any orders you place, support loyalty and location-based features and related products and services,  send you receipts of orders completed via the App, and to enable you to redeem discounts or rewards or participate in loyalty programs with third party providers. 
• To generate analytics: We will use your personal data to generate analytics for the purposes of understanding how you use the App and services so that we may continue to improve them;
• To send service or support related communications: We will use your personal data to send you service or support related communications (for example, to confirm orders you have placed via the App, to update you about the status of an order or about updating your account details), as well as to general administrative queries including managing queries, complaints or claims and to provide you with important information about our business; 
• To personalise your experience: We will use your personal information to create a profile about you to obtain insight about market, user and industry trends, to advise you of promotions we think you might like within the App, which may include personalised offers or personalised menu items. We will work with our venues and their sponsors create a unique, personalised experience for you. 
• To deliver advertising and send marketing.  We may use your personal data to send you marketing communications (including promotions, offers and market surveys) and provide you with online advertising in accordance with any preferences you have expressed (on our App and on third party websites). Note that if you opt out of receiving direct marketing, we may still contact you with service related communications.  
• To maintain security.  We may use your personal data to maintain the security of our App (for example, to detect and prevent fraudulent behaviour, violations of our terms of service, or similar).
• To comply with legal requirements.  We will use your personal data to comply with the laws and regulations to which we are subject (for example, legal requirements to report to tax authorities, disclose information to law enforcement authorities, or similar). 

We may also use your personal data for compatible purposes that you would reasonably expect, and as otherwise permitted by applicable law including the UK GDPR.

Lawful bases for processing your personal data

Data protection law requires us to only process personal data where we have a valid legal basis for doing so. We will ordinarily collect and use your personal data only where (i) we have your consent (which will be apparent from the context, because we will ask for you consent when you provide your personal information); (ii) it is necessary to perform a contract with you (for example, we must process your App Registration Information and Ordering information in order to fulfil any order you place via the App), in which case we will be unable to fulfil our contract with you if you do not provide necessary information; (iii) the use is within our legitimate interests and not adverse to your rights and freedoms (for example, to send you marketing communications, provided this is consistent with your communications preferences); or (iv) it is necessary for compliance with a legal obligation.  

As we may rely on different legal bases for each of the different categories of personal data we process and the purposes for which we process them, please contact us if you would like further information about the specific legal basis relied upon in any particular context.

Disclosure of information

We may disclose your personal data to the following categories of recipients: 

• To our group companies. We may share your personal data with other me&u group companies where this is necessary for the purposes described above. me&u group companies will at all times protect your personal data in accordance with this Privacy Notice.
• To venue partners. We will disclose your personal data to our trusted venue partners to process orders that you place through the App and to deliver, administer and support both our and that venue’s activities. This will be disclosed to you when using the App at a venue. We require our venues to agree that any information disclosed to that venue will be dealt with in accordance with that venue’s privacy notice and in accordance with applicable privacy and marketing laws. 
• To our service providers. We may also disclose your personal data to third parties such as our contractors, agents and service providers who help us deliver, administer and support our activities including for example: to assist us with customer support, to provide features of the App; deliver marketing and digital marketing services; to conduct market research and analysis; to host and back up our servers, data and website; to process payments; to conduct data analysis and data matching services; and when required by law. 
• To competent authorities: We may use and disclose your personal data where we believe it is necessary to exercise, establish or defend legal claims, to protect the vital interests of any person, or to comply with an order or request from any competent court, regulator, law enforcement agency or government authority.
• To a potential buyer: We may disclose your personal data to potential buyer (and its agents and advisers) in connection with any proposed purchase of any part of our business.  We will inform the buyer to use your personal data only for the purposes set out in this privacy notice.
• To any other third party: We will only transfer your personal data to other third parties with your consent or where we are required or permitted by law to do so.
  

International transfers

me&u is located in the UK, but our group companies and service providers operate in various countries around the world, including but not limited to the USA, Australia and the Philippines.  For these reasons, when you use our App, your personal data may be transferred to countries other than the country in which you reside. 

Where we transfer personal data outside of the UK, we will ensure that appropriate safeguards are used, such as: (i) ensuring the recipient is located in a country that the UK Secretary of State has decided is adequate to receive personal data from the UK; (ii) the UK Information Commissioner’s International Data Transfer Agreement or International Data Transfer Addendum (as applicable) to the EU Standard Contractual Clauses; or (iii) a data transfer derogation applies (for example, where you have consented to the transfer of your personal information).  We will take reasonable steps to ensure that our overseas providers only process your personal data for authorised purposes, and have appropriate technical, organisational and contractual means to protect your personal data.

If you have further questions about our international data transfers and the specific measures we use in any case, please contact us for further information.

Data retention

We hold your personal data for as long as we need it to provide our services (for example, as long as is necessary to provide you with the App or services) or as otherwise necessary to comply with applicable legal requirements. 

When we no longer need your personal data, we have procedures in place to either destroy or to permanently de-identify the information, or if this is not possible (for example, because your personal data is stored in backup archives), we will securely store your personal data and isolate it from any further processing until deletion is possible. 

Your rights

Data protection laws give individuals rights with respect to the collection and use of their personal information.  Depending on the laws that apply in your country and to which we are subject, these may include the ability for you:

• to request access to, correction of, deletion of, or portability of personal data that we process about you,
  

• to request that we restrict processing, or to object to our processing, of personal data about you,
  

• to opt-out of marketing communications that we may send you (even if you previously consented to receive these) – for example, by clicking on the unsubscribe link in any marketing emails we send,

• to not be subject to wholly automated decisions if these have legal effects on you or similarly significantly affect you, 
  

• if our processing is based on your consent, to withdraw your consent to our processing (although this will not affect the lawfulness of our processing prior to your withdrawal), and
  

• to complain to us about our use of your personal data, as well as complaint to your local data protection authority about our use of your personal data. We ask that you contact us first, so that we can try to help, but you do not have to. 
  

Please contact us at hello@meandu.com if you wish to exercise any of these. We will fulfil any such requests in accordance with applicable data protection laws. 

Contact

The data controller of your information is me&u. 

If you have a question or concern about our use of your personal data, you can contact us at: me&u Privacy Officer, hello@meandu.com or by post to Attention Privacy Officer at 2nd Floor, 47-53, Riverside East House, 2 Millsands, Sheffield S3 8DT. 

We will consider any complaints we receive within a reasonable  time. If we cannot resolve your complaint to a satisfactory standard, you are entitled to lodge your complaint with the Information Commissioner’s Office at https://ico.org.uk/. 

‍