Privacy Policy

RestroEngage (“RestroEngage”, “we”, “us” or “our”) provides an all-in-one restaurant management platform covering loyalty programmes, discounts, gift cards, reservations, digital receipts and social media marketing. Our office is at Piccadilly Business Centre – Unit C, Aldow Enterprise Park, Manchester, M12 6AE, United Kingdom.

This policy explains how we handle personal information when you visit restroengage.com, contact us, or use our platform. We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies, the EU GDPR.

Controller. We are the data controller for information about visitors to our website, people who enquire about our services, and the contacts at restaurants that use RestroEngage.

Processor. When a restaurant uses RestroEngage to run loyalty programmes, gift cards, reservations, promotions or digital receipts for its own guests, the restaurant is the controller of that guest data and we process it on the restaurant’s behalf and under its instructions. If you are a restaurant guest, please contact the restaurant directly about how it uses your information — we will help them respond to your request.

Information you give us. When you complete our contact form, email us, message us on WhatsApp or use our live chat, we collect what you provide, such as your full name, phone number, email address, restaurant name and the content of your message.

Restaurant account information. If your restaurant becomes a customer, we collect business and contact details, account user details, and billing information needed to provide the service.

Guest data processed for restaurants. Depending on the features a restaurant uses, this may include guest names, contact details, reservation details, loyalty points and rewards, gift card balances, and transaction and receipt details (such as items purchased, amounts paid, discounts and branch).

Information collected automatically. When you visit our website we and our providers collect technical and usage information, such as IP address, browser and device type, pages viewed, referring pages and approximate location, through cookies and similar technologies.

• Responding to enquiries and arranging demos or follow-up conversations — legitimate interests, or steps taken at your request before entering into a contract.
• Providing and supporting the platform, including account management, billing and customer support — performance of our contract with the restaurant.
• Processing guest data for loyalty, gift cards, reservations, promotions and receipts — on the restaurant’s instructions as its processor.
• Improving our website and services through analytics — your consent where required for non-essential cookies, otherwise legitimate interests.
• Sending service updates and marketing about RestroEngage — legitimate interests or consent, as required by law. You can opt out at any time.
• Security, fraud prevention and legal compliance — legitimate interests and legal obligations.

We do not sell your personal information.

Our website uses cookies and similar technologies, including:

• Essential cookies that are needed for the site to work and stay secure.
• Google Analytics, which helps us understand how visitors use the site (for example, pages visited and time on site). Google’s practices are described at policies.google.com/privacy.
• Zoho SalesIQ, which powers our live chat and may set cookies to keep your conversation going and identify returning visitors.

You can block or delete cookies in your browser settings. You can also opt out of Google Analytics using Google’s browser add-on. Blocking some cookies may affect how the site works.

We share personal information only with:

• Service providers who help us run our business, such as hosting, email delivery, analytics (Google), live chat (Zoho) and payment providers. They may use the data only to provide services to us.
• Restaurants, for guest data we process on their behalf.
• Integration partners, such as point-of-sale systems, when a restaurant chooses to connect them to RestroEngage.
• Professional advisers and authorities, where needed to comply with law, enforce our terms or protect rights and safety.
• A buyer or successor in connection with a merger, acquisition or sale of assets, subject to this policy.

Some of our service providers are based outside the UK and European Economic Area. Where we transfer personal information internationally, we make sure appropriate safeguards are in place, such as adequacy regulations, the UK International Data Transfer Agreement or Addendum, or Standard Contractual Clauses.

We keep personal information only for as long as we need it for the purposes described in this policy. Enquiry information is typically kept for up to 24 months after our last contact with you. Customer account and billing records are kept for the life of the contract and then for as long as required for legal, tax and accounting purposes (usually up to 6 years). Guest data processed for restaurants is kept according to the restaurant’s instructions and deleted or returned when our contract with them ends.

We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access controls and limiting access to people who need it. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.

Subject to certain conditions, you have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information deleted;
• restrict or object to our processing, including for marketing;
• receive your information in a portable format;
• withdraw consent at any time, where we rely on consent.

To exercise your rights, email us at [email protected]. We will respond within one month. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, though we would appreciate the chance to address your concerns first.

Our website and platform are designed for businesses and are not directed at children. We do not knowingly collect personal information from children under 13 through our website. If you believe a child has given us personal information, please contact us and we will delete it.

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page and, for significant changes, let customers know directly.

If you have questions about this policy or how we handle your information, contact us: