Privacy Policy
Effective Date: 13 August 2023
1. Introduction
Welcome to Ask4Dish ("we", "our", or "us"). This Privacy Policy explains how we collect, use, share and protect your personal information when you use our online food ordering platform (the "Service").

For the purposes of UK data protection law, the data controller is: AD Smart Solutions Ltd, 48c Castlandhill Road, Rosyth, Dunfermline, Scotland, KY11 2DH. You can contact us at privacy@ask4dish.com.
2. Information We Collect
We may collect the following types of personal information when you use our Service:

• Contact information (such as name, email address, delivery address, phone number);
• Order information (such as items ordered, order notes and order history);
• Account information (such as login details and preferences).

Dietary preferences and restrictions: if you provide allergy or intolerance information, this may be treated as health-related information. We use it only to pass your requirements to the Restaurant so they can prepare your order.

We also automatically collect certain information when you interact with our Service:

• Log data (such as IP address, browser type, operating system);
• Usage information (such as pages visited and actions taken);
• Device information (such as device type and device identifiers).
3. Payment Information
We do not collect or store your credit or debit card details. Card payments are processed by a third-party, PCI-compliant payment provider. When you choose a card payment method, you may be redirected to the payment provider or a payment form provided by them.

We may receive and store limited payment-related information such as payment status, a transaction reference, and the amount paid, for the purposes of order processing, accounting and customer support.
4. How We Use Your Information
We use your personal information for the following purposes:

• To provide the Service and process your orders (including sending your order to the Restaurant and providing order updates);
• To manage your account;
• To provide customer support and respond to requests;
• To improve and maintain the Service (including troubleshooting, analytics and service performance);
• To prevent fraud, misuse and security incidents;
• To send service messages (e.g., order confirmations, important service updates).

Marketing: if we send marketing messages, we will do so in accordance with applicable law and you can opt out at any time using the unsubscribe option in the message or by contacting us at privacy@ask4dish.com.
5. Lawful Bases for Processing
We process personal information under the following lawful bases (as applicable):

• Contract: to take steps at your request and to fulfil your order and provide the Service;
• Legitimate interests: to operate, improve and secure the Service, prevent fraud, and maintain service quality (where these interests are not overridden by your rights);
• Consent: where required (for example, where we rely on consent for certain marketing or cookie/storage technologies).

Where you provide allergy/intolerance information, we process it only for the purpose of communicating your requirements to the Restaurant and fulfilling your order.
6. How We Share Your Information
We may share your personal information with:

• Restaurants and food vendors to fulfil your orders (including any order notes and dietary requirements you provide);
• Delivery partners where delivery is required;
• Service providers that support our operations (e.g., hosting, analytics, customer support tools);
• Payment providers (limited information such as transaction reference and payment status; we do not receive your card details);
• Regulatory authorities, law enforcement or other parties where required by law or where necessary to protect rights and safety.
7. Cookies and Similar Technologies
We use cookies and similar technologies (such as local storage and session storage) to operate the Service and remember your preferences. For more information, please see our Cookie Policy.
8. Retention
We keep personal information only for as long as necessary for the purposes described in this Privacy Policy, including to comply with legal, accounting and reporting requirements, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and how we use it.
9. Your Rights
Depending on your circumstances, you may have rights to:

• Access your personal information;
• Correct inaccurate information;
• Request deletion of your information;
• Restrict or object to our processing;
• Data portability (in certain circumstances);
• Withdraw consent where we rely on consent.

To exercise your rights, contact us at privacy@ask4dish.com.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
10. Security
We implement appropriate technical and organisational measures to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure.
11. Children’s Privacy
Our Service is intended for users aged 16 and over (and 18 and over where an order contains age-restricted products such as alcohol). We do not knowingly collect personal information from children under the applicable age threshold.
12. International Transfers
If we transfer personal information outside the UK, we will ensure appropriate safeguards are in place (for example, use of approved contractual protections) as required by applicable law.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We recommend reviewing it periodically.
14. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy, please contact us at privacy@ask4dish.com.