We are One Menu Inc. and in this Privacy Policy we are referred to as “we”, “us”, or “our”. We understand that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits our “Website”, whatisedible.com. We will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

This Privacy Policy describes how One Menu Inc. collects, uses, and discloses your Personal Information. Please read this Privacy Policy carefully and ensure that you understand it.

1. What This Privacy Policy Covers

This Privacy Policy applies only to your use of our Website. Our Website may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

When you visit our Website we collect certain information about your device, your interaction with the Website, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

References in this Privacy Policy to our “Services” include our Website (whatisedible.com) and any related subdomains, desktop and mobile applications, or APIs provided by One Menu Inc.

2. The Personal Information we collect

In order to provide you with our services, we collect, use, and disclose personal information to operate our business as necessary. Personal Information is information about an identifiable individual, as defined in the relevant and applicable legislation. We collect information when you provide it to us, including through your use of our Services, as further described below. This includes gathering Personal Information submitted via our Website or through communication with Our employees via email, social media, or other means and this includes:

A. Information You Provide To Us

• Contact Information: when you register for our Services, we collect your; name, address, phone number, and email address;

• Personal Information: when you register for our Services, where applicable, we collect personal details, such as your name, postal and email addresses, phone number, and other contact information and personal information you choose to provide to us when you interact with us;

• Special Category Data: we may collect and process the following special categories of personal information about you:

  • health and medical data, such as information on dietary requirements;

• Feedback and Marketing Preferences: we collect your marketing preferences and feedback from Services provided;

• Payment Information: this includes bank account information and payment card details.
  
  

B. Non-Personal Information Collected From Your Usage

• Information Collected Through Automated Methods: we may collect details of your visits to our Website and information collected through cookies and other tracking technologies including:

  • Internet protocol (IP) address;

  • Computer or mobile-device operating system and browser type;

  • Type of mobile device and its settings.
    
    

3. How We Use Your Information

Here are some of the ways we may use the personal information you provide us;

• To register and provide you with access to our Services;

• To facilitate transactions and payments;

• To personalize your user experience and recommend food services;

• To oversee our interaction with you, which includes handling feedback and conducting customer surveys;

• To communicate with you about our Services, related issues, support requests, promotions and new Services that may be of interest to you;

• To provide you with general and tailored electronic and non-electronic direct marketing materials. Additionally, we support targeted advertising efforts related to our Website and Services, along with those of our business partners (including promotions, contests, prize draws, competitions, and sweepstakes);

• To evaluate how you use our existing Services so that we can customize and enhance our Services, as well as your overall customer experience and develop new Services;

• To allow you to participate in interactive features of our Service when you choose to do so;

• To anonymize and/or aggregate information for business development and business analytics purposes, which encompasses consumer and operational research. This assists us in evaluating the efficiency of our sales, Services, marketing, and advertising efforts, as well as in analyzing market trends and assessing future customer demand;

• To detect, investigate, and prevent fraudulent transactions and other illegal activities;

• To comply with legal obligations and enforce our terms of service;

• To notify you about changes to our Services;

• For other purposes for which we provide specific notice at the time the information is collected.
  
  

4. Legal Bases For Processing

We will process your personal information lawfully, fairly, and in a transparent manner. We collect and process information about you only where we have legal bases for doing so. These legal bases depend on the Services you use and how you use them. Where we are subject to the General Data Protection Regulation (“GDPR”), we process your personal information on the basis of:

• Consent: This applies where you give us consent to process your data for a specific purpose - Article 6(1)(a) GDPR.

• Contract: This applies where it’s necessary for us to process your data in order to perform a contract between us, or to take steps at your request before entering into such a contract - Article 6(1)(b) GDPR.

• Legal Obligation: We may need to process your data to comply with a legal obligation if we are required to do so by law, this may include, verifying your age and your identity before the conclusion of a contract, to prevent fraud - Article 6(1)(c) GDPR.

• Legitimate Interests: Where the above legal bases do not apply, we may still be able to process your data if doing so satisfies a legitimate interest of ours which is not overridden by your own data protection interests to achieve the purposes set out above in section 3.
  
  

5. Sharing Your Information

No personally identifiable data is ever sold to third parties by One Menu Inc. We limit access to your personal information to employees and authorized service providers (information service providers and marketing agencies), on a need-to-know basis, so they can perform designated functions for us such as;

• analytics, customer support, data storage, debt collection, email communications, error logging, hosting, maintenance, marketing, product design, product testing, surveys, system administration and web conferencing;

• processing credit and debit card transactions, where the bank or card processing agency requires us to verify your personal details for authorization. We do not store payment information which is passed directly to our payment service provider, Stripe, which is certified at PCI Level 1.

We may share (whether or not for payment) aggregated and anonymized data that does not identify you or any individual user, for purposes such as advertising, analytics, industry reporting or research.

If we decide to merge, sell or transfer all or part of our business, we may share your information with buyers or other parties involved in the corporate transaction.

We may share your information with our professional advisers such as our lawyers, auditors, and accountants.

We may also be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority, such as law enforcement.

6. Cookies

A Cookie is a small text file that a website saves on your device (such as a computer, mobile phone, or tablet) and reads during your future visits. They are commonly employed to enable websites to function or function more effectively, while also offering insights to website owners. Cookies permit the website to recognize you, enabling it to, for instance, recall your login information for your next visit.

Our Site may place and access certain first-party Cookies on your computer or device. First-party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of our Site and to provide and improve our Services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

All Cookies used by and on Our Site are used in accordance with relevant Cookie Law.

Before Cookies are placed on your computer or device, you will be shown a pop-up requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of our Site may not function fully or as intended. You will be given the opportunity to allow only first-party Cookies and block third-party Cookies.

Certain features of our Site depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”. These Cookies are shown in the table below. Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser’s settings, but please be aware that our Site may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them.

(a) Strictly Necessary First Party Cookies:

• To recall your login information for your next visit to build.whatisedible.com. Cookie served by Supabase.

• To measure website activity and analyze usage behaviour in order to improve our website and services on whatisedible.com, build.whatisedible.com and menus.whatisedible.com. Cookie served by Post Hog.

(b) Functional Cookies

• n/a

(c) Analytical Cookies

• n/a

(d) Advertising Cookies

• n/a

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our record-keeping practices are in compliance with relevant laws. We will keep and utilize your information as needed to manage our relationship with you, enhance your personalized customer experience, meet our legal obligations (such as retaining your information to comply with tax or revenue laws), resolve disputes, enforce our agreements, and as otherwise detailed in this Privacy Policy.

In some circumstances, we will anonymize your personal data (so that it can no longer be associated with you), in which case we may use this information indefinitely without further notice to you.

8. Data Security

We take reasonable measures to protect your personal information. We make efforts to protect against accidental loss, unauthorized access, disclosure, alteration, or destruction.

However, no security system is impenetrable and due to the inherent nature of the internet, we cannot guarantee that information, during transmission, or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.

9. International Data Transfer

Your personal information may be collected, used, processed, transferred, and retained by us, and our service providers in multiple countries (including Canada, the United States, the United Kingdom, and the European Economic Area (“EEA”)) which may be outside the region in which you are situated and may have different privacy or data protection legislation, and may therefore be subject to the laws of these countries.

Specifically, our Services are hosted in Europe, and our affiliates and service providers operate around the world, including in Europe, the United Kingdom, Canada, and the United States. This means that when we collect your personal information, we may process it in any of these countries which have differing levels of protection for personal information.

Since we are subject to the GDPR, we would only transfer your personal information to countries that are recognized under the GDPR and UK law as having an adequate level of data protection. In cases where such adequacy isn't automatically ensured, we take the necessary steps to establish or confirm that all recipients of your data will maintain an adequate level of data protection. This often involves entering into suitable data transfer agreements that adhere to Standard Contractual Clauses.

10. Third-Party Links

Our Website may contain links to other third-party websites. We do not endorse, screen, or approve, the privacy practices or content of such other websites. If you choose to follow a link to any of these third-party websites, please be aware that they may have their own privacy policies and we do not assume any responsibility for or liability for their policies or how they process your personal information. This Privacy Policy applies solely to information collected by us.

11. Your Rights

Under the relevant and applicable law, you may have rights under data protection laws in relation to your personal data. These rights are set out below. If you wish to exercise any of these rights, please contact us as set out in section 13. These rights include:

• Request access to your personal data (a "data subject access request"). This enables you to check the type of personal information we hold about you and to access or request a copy of the personal data we hold about you.

• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data corrected, supplemented, anonymized, or deleted.

• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.

• Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data (but still retain it).

• Request the transfer of your personal data to you or to a third party. We will provide your personal data in a structured, commonly used, machine-readable format.

• Object to processing of your personal data. You have a right to object where we are relying on a legitimate interest.

• Withdraw consent at any time where we are relying on consent to process your personal data. The lawfulness of any processing carried out before you withdraw your consent will not be affected. If you withdraw your consent, we may not be able to provide certain Services to you. We will advise you if this is the case at the time.

• Lodge a complaint with your data protection authority. It is worth noting that some authorities expect you to address any complaints with us before contacting the regulator.
  
  

12. Changes To This Policy

We may revise this Privacy Policy from time to time at our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law. The date that this Privacy Policy was last updated appears at the top of this page.

13. Contact

If you have any questions about this Privacy Policy, or if you wish to submit a request to exercise your rights as detailed in this Privacy Policy, or discuss any privacy-related issues, please contact our data protection officer who supervises how we use personal information. You can contact our data protection officer via email at: alex@whatisedible.com