Privacy Policy

1. Introduction

MyFoodVoucher ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

• Name, email address, and contact details
• Account credentials (username and encrypted password)
• Business information (for business owners)
• Payment information (processed securely through third-party payment processors)
• Postal code for location-based services

2.2 Usage Data

• IP address and device information
• Browser type and version
• Pages visited and time spent on our site
• Voucher views, clicks, and redemptions
• Search queries and preferences

2.3 Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can control cookie preferences through your browser settings.

3. How We Use Your Information

• Service Delivery: To provide, maintain, and improve our voucher platform
• Account Management: To create and manage your account
• Communications: To send you vouchers, deals, and service updates
• Analytics: To understand how users interact with our services
• Marketing: To send promotional emails (with your consent)
• Legal Compliance: To comply with legal obligations and protect our rights

4. Legal Basis for Processing (UK GDPR)

We process your personal data based on:

• Consent: When you sign up for newsletters or marketing communications
• Contract: To fulfill our services when you register or use vouchers
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligation: To comply with UK laws and regulations

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Business Partners: To fulfill voucher redemptions and offers
• Service Providers: Email services, hosting providers, analytics tools
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets

6. Your Data Protection Rights (UK GDPR)

Under UK GDPR, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us at info@myfoodvoucher.co.uk or use our Account Deletion Form.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Account data: Until account deletion or 3 years of inactivity
• Transaction records: 7 years (for tax and legal compliance)
• Marketing data: Until you unsubscribe or request deletion
• Analytics data: Anonymized after 26 months

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Encrypted password storage
• Regular security audits and updates
• Access controls and authentication
• Secure hosting infrastructure

9. International Data Transfers

Your data is primarily stored and processed in the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

14. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):