PRIVACY NOTICE
Last updated: 10 August 2026
1. Who we are
DineSafe is committed to protecting your privacy and handling personal information fairly, lawfully and
transparently. For the purposes of UK data-protection law, the controller of personal information
processed through DineSafe is [INSERT FULL LEGAL NAME OF CONTROLLER / BUSINESS ENTITY].
You can contact us about privacy matters at [INSERT PRIVACY EMAIL] and [INSERT POSTAL OR
REGISTERED BUSINESS ADDRESS, IF APPLICABLE].
2. Information we collect
Depending on how you use DineSafe, we may collect and process:
• Account and contact information: such as your name, email address and account credentials.
• Profile information: information you choose to add to your DineSafe profile, including a profile
photograph where that feature is used.
• Allergy, intolerance, dietary and ingredient information: the allergies, intolerances, dietary
requirements, ingredients or other food-related information you choose to record.
• Dining and sharing information: information connected with restaurants you interact with through
DineSafe, dishes you select, notes you choose to provide and information you choose to share with a
participating restaurant.
• Support and feedback information: messages, feedback and information you provide when
contacting DineSafe.
• Technical information: device, application, security, diagnostic and usage information collected as
necessary to operate, secure and improve the platform.
3. Allergy information and special-category data
Information about an allergy may reveal information about your health and may therefore constitute
special-category personal data under UK data-protection law. We treat this information with additional
care.
Where DineSafe relies on your explicit consent to process allergy or other health-related information, we
will ask you to expressly confirm that consent. You may withdraw consent at any time. Withdrawal will not
affect processing that was lawful before consent was withdrawn, but it may mean that features requiring
that information can no longer be provided.
4. Why we use your information and our lawful bases
We use personal information only where we have a lawful basis to do so. Depending on the processing
activity, this may include processing necessary to provide the DineSafe service you request, our
legitimate interests in operating and securing the platform, compliance with legal obligations, or consent
where required.
For special-category information, such as health information revealed by an allergy, DineSafe must also
identify an applicable condition under Article 9 of the UK GDPR. Where explicit consent is the applicable
condition, DineSafe will obtain it separately and expressly.We may use your information to create and manage your account; provide allergy, ingredient and dietary
features; enable information you choose to share with participating restaurants; provide support; maintain
security and prevent misuse; diagnose technical problems; and improve the functionality and reliability of
DineSafe.
5. Sharing information with restaurants
DineSafe may enable you to share selected profile, allergy, ingredient, dietary, dish or note information
with a participating restaurant. DineSafe will only make such information available in accordance with the
sharing actions and features available to you within the platform.
The exact information made available to a restaurant depends on the functionality you use. Before
publication, DineSafe must ensure that this notice accurately reflects the fields restaurants can access
and how long that access continues.
6. Service providers and other recipients
We may use trusted service providers to host, secure, maintain, support or operate DineSafe. They may
process personal information on our behalf only as necessary to provide their services and subject to
appropriate contractual and security requirements.
We may also disclose information where required by law, to establish or defend legal rights, or where
otherwise permitted by applicable data-protection law.
We do not sell your personal information.
7. International transfers
Some service providers may process or access personal information outside the United Kingdom. Where
a restricted international transfer takes place, DineSafe will use an appropriate lawful transfer mechanism
and safeguards required by UK data-protection law. [CONFIRM ACTUAL HOSTING, PROCESSORS,
COUNTRIES AND TRANSFER MECHANISMS BEFORE PUBLICATION.]
8. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes for which it was
collected, including providing the service, maintaining security and records, resolving disputes and
meeting legal obligations. Retention periods may differ according to the type of information and purpose
of processing. [INSERT VERIFIED RETENTION PERIODS OR RETENTION CRITERIA BEFORE
PUBLICATION.]
9. Security
We use appropriate technical and organisational measures designed to protect personal information
against unauthorised or unlawful processing and against accidental loss, destruction, alteration or
disclosure. No system can guarantee absolute security, and users should also protect their account
credentials.
10. Your data-protection rights
Depending on the circumstances, you may have rights to be informed about our use of your information;
request access to it; ask us to correct inaccurate or incomplete information; request erasure; request
restriction of processing; object to certain processing; receive certain information in a portable format; and
withdraw consent where processing is based on consent. Some rights are subject to legal conditions and
exemptions.To exercise a right, contact us at [INSERT PRIVACY EMAIL]. We may need to verify your identity before
acting on a request.
11. Account and data deletion
You may request deletion of your account and associated personal information through [INSERT
ACTUAL IN-APP DELETION METHOD OR CONTACT ROUTE]. We may retain limited information where
necessary to comply with legal obligations, establish or defend legal claims, prevent fraud or misuse, or
for other lawful purposes.
12. Children
DineSafe's intended age requirements and any arrangements for children's use must match the way the
app is actually offered. [INSERT VERIFIED MINIMUM AGE / PARENT OR GUARDIAN
ARRANGEMENTS BEFORE PUBLICATION.] If DineSafe is likely to be accessed by children, its design
and privacy information must take account of applicable UK requirements for children's data.
13. Automated decision-making
DineSafe does not intend to make solely automated decisions about users that produce legal or similarly
significant effects. If this changes, we will update this notice and provide the information required by law.
14. Changes to this Privacy Notice
We may update this Privacy Notice where our services, technology or legal obligations change. Where
changes are material, we will take reasonable steps to bring them to users' attention before the new
processing begins where required.
15. Complaints and contact
If you have concerns about how DineSafe uses your personal information, please contact us first at
[INSERT PRIVACY EMAIL] so that we can investigate.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's
data-protection regulator. Current contact and complaint information is available from the ICO.