BentoMe Limited - Privacy Notice
Date of last revision: 1 Sep 2018
We ask that you read this privacy notice (“Notice”) carefully as it contains important information on who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information, and how to contact us.
1. Who we are
We are responsible for, and control the processing of, your personal data.
Please note that some BentoMe restaurants are franchises that are owned and operated by third parties, called franchisees. Each franchise is an independent business and is responsible for the operation of its own store and responsible for ensuring its own compliance with data protection and other laws. This Notice does not apply to franchisees of BentoMe, or to websites or mobile apps operated by franchisees. Please refer to the privacy notices of such franchisees for information on how they collect, store, use and share personal information.
If you would like to contact us in relation to this Notice, you may do so by:
2. Information collected by us
We may collect personal information about you when you use our online services or visit one of our restaurants. For example, when you:
- purchase items at our restaurants;
- register to receive emails from us relating to our products, services, discounts, offers, competitions and/or events;
- contact us (for example with a question or to provide feedback).
The types of personal information we may collect include:
- your personal details such as name, gender, e-mail address, postal address, phone number, date of birth;
- information about your use of a discount or offer;
- information about a BentoMe Giftcard that you purchase, register, top-up and/or use;
- information about which BentoMe restaurants you have visited;
- your contact and marketing preferences;
- other personal information you provide to us.
3. How we use your personal information
We may use your personal information to:
- fulfil your requests or orders and process payments for our products and services;
- communicate with you about our products and services (including giftcards);
- administer your participation in contests, competitions, prize draws, offers, promotions or special events;
- send you marketing emails (where we are permitted to);
- deliver content (including advertising);
- respond to questions that you ask us, or complaints or concerns that you raise with us;
- personalise your experience on our Website and in-restaurant technologies, such as providing you with content in which you may be interested, and making navigation on our Website easier;
- perform data analytics, including consumer research, trend analysis, and financial analysis;
- operate, evaluate and improve our business, including the development of new products and services; determination of the effectiveness of our sales, marketing and advertising efforts; and analysis and improvement of our products, offers, promotions, and other technologies;
- protect against, identify and prevent fraud and other criminal activity, claims and other liabilities; and
- comply with our obligations under applicable law.
We may process your location information collected through automated means to:
- personalise the visitor experience in our restaurants, on our Website or on our marketing channels;
- deliver content (including advertising) tailored to our users’ interests and the manner in which our users browse our Website or in-restaurant technologies;
- help diagnose technical and service problems;
- identify a device for fraud prevention purposes;
- gather demographic information about our users.
4. Lawful bases of processing
In order to process personal data, we must have a lawful reason (sometimes called a lawful basis). We always ensure that this is the case, and we set out our lawful bases below.
4-1. Contractual Necessity
If you are our customer or applying for a job, we will process your personal data for the following purposes, on the legal basis that it is necessary for us to provide our products and services to you:
- to identify you;
- to respond to your enquiries;
- to allow you to register an account;
- to provide our products and services;
- to carry out billing and administration activities, including refunds and providing and managing giftcards;
- to evaluate your job application and take any next steps, and to evaluate your suitability for roles where you have asked to be considered for future opportunities.
4-2. Legitimate Interests
We process your personal information for our legitimate business purposes, which include the following:
- to conduct and manage our business;
- to enable us to carry out our services;
- to ensure our website and systems are secure (for example, by conducting security penetration tests on our website to ensure our security tools are effective);
- to personalise your web experience – for example, by tailoring our products, offers and services to you;
- to analyse, improve and update our services for the benefit of our customers;
- to deal with complaints;
- to detect and prevent fraud;
- to let you know about our products, services, promotions or events that we consider may be of interest to you: we carry out this processing on the legal basis that we have a legitimate interest in marketing our products and services, and only to the extent that we are permitted to do so by applicable direct marketing laws. Please see clause 8 below for further information about our marketing activities and regarding your right to opt out.
Whenever we process your personal data for these purposes, we ensure that your interests, rights and freedoms are carefully considered.
4-3. Compliance with laws
We may process your personal data in order to comply with applicable laws (for example, if we are required to co-operate with an investigation pursuant to a court order).
5. How long will your personal information be kept?
We carefully consider the personal data that we store, applying reasonable criteria, and we will not keep your information in a form which identifies you for longer than is necessary for the purposes set out in this Notice.
We may store your contact details, and carry out marketing profiling activities, for direct marketing purposes. If you have given your consent, or if we are otherwise permitted to do so, we may contact you about our products or services that may be of interest to you. If you prefer not to receive any direct marketing communications from us, you can opt out at any time by sending an email to firstname.lastname@example.org. We will also give you the option to opt out each time we send a marketing communication by electronic means.
7. Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorized way.
8. Your information rights
We draw your attention to your following rights under data protection law:
- the right to be informed about the collection and use of your personal data;
- the right of access to your personal data, and to request a copy of the information that we hold about you and supplementary details about that information;
- the right to have inaccurate personal data that we process about you rectified;
- the right (in certain circumstances) to have personal data that we process about you blocked, erased or destroyed;
- the right to object:
- to processing of personal information concerning you for direct marketing;
- to decisions being taken by automated means which produce legal effects concerning you or that similarly significantly affect you;
- in certain other situations, to our continued processing of your personal information;
- the right of portability of your data in certain circumstances;
- rights in relation to automated decision-making.