Privacy Policy

1. What We Collect

We only collect information about your food allergies — no names, emails, or other personal identifiers. The only information anyone can see, is your allergies. Nothing else.

2. Why We Collect It

• Help you find dishes that are suitable for your allergies
• Inform the restaurant you are ordering from so they can consider your dietary needs
• Generate anonymous statistics (e.g. allergy trends by dish) to help restaurants improve food safety — you can opt out of this.

3. Legal Basis for Processing

Under the UK GDPR, your allergy data is classified as “special category data”, which means we need a lawful basis to process it. Our legal basis is:

• Your explicit consent — we ask for your permission before collecting or sharing your allergy data

You can withdraw your consent at any time by contacting us (see contact details below).

4. Who We Share It With

We only share your allergy data with:

• The restaurant you are ordering from, to ensure your food is prepared appropriately
• Our own development team, who maintain the system and ensure it works properly

We do not sell your data or share it with any third parties for marketing purposes. Restaurants may receive aggregate, anonymised statistics (e.g. “10% of users were allergic to peanuts”), and you can opt out of giving this data.

5. How Long We Keep Your Data

We retain allergy data for up to 6 years, after which it will be permanently deleted. This helps us to improve and audit our allergy-matching systems, and provide data consistency if you use our service again within that period.

If you would like your data to be deleted earlier, please contact us (see below).

6. Your Rights

Under the UK GDPR, you have the right to:

• Access the data we hold about you
• Correct any errors in your allergy information
• Request deletion of your data
• Withdraw your consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise any of these rights by emailing us at: support@allergengo.com