Lawful Basis and Purposes of Data Processing
Lawful basis for processing
We rely on legitimate interest as the lawful basis on which we collect and use your personal data. Our legitimate interests are performance of contracts with our customers, partner restaurants and suppliers (including couriers), marketing and business development and the administration and improvement of Atyourtime.
Purposes of processing
We use information held about you in the following ways:
- To provide you or the organisation that you are engaged by with our services.
- To carry out our obligations arising from any contracts entered into between you (or the organisation that you are engaged by) and us.
- To provide you with information and offers that you request from us or which we feel may interest you.
- To notify you about changes to our service.
- To ensure that content on Atyourtime is presented in the most effective manner for you and for the device(s) you use to access and view Atyourtime.
Marketing
In addition to the above uses we may use your information (and, where you have consented, permit selected third parties to use your information), to notify you about goods or services which may be of interest to you. Where we do this, we will contact you by electronic means (e-mail or SMS) only if you have consented to such communication. If you do not want us to use your data in this way please either (i) tick the relevant box situated on the form on which we collect your data (for example, the registration form); (ii) unsubscribe from our electronic communications using the method indicated in the relevant communication; or (iii) inform us at any time by contacting us at the contact details set out below.
Storing your personal data
Security
We take appropriate measures to ensure that any personal data are kept secure, including security measures to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to Atyourtime; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Atyourtime may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and terms of use and that we do not accept any responsibility or liability for these policies and terms of use. Please check these policies before you submit any personal data to these websites.
Keeping your personal data up to date
If your personal details change you may update them through your Atyourtime account or, if you are unable to do so, by contacting us using the contact details below.
We will endeavour to update your personal data within seven (7) working days of any new or updated personal data being provided to us, in order to ensure that the personal data we hold about you is as accurate and up to date as possible.
How long we keep your personal data
We will hold the data set out above for a reasonable time having regard to the nature of the personal data and the purpose for which it was collected. In particular:
- Where we hold your personal data in connection with the performance of a contract with one of our customers, partner restaurants or suppliers, we will hold your data, and in particular any communications between you and us in relation to the negotiation or performance of the contract by either party for so long as that contract is in force and for a period of at least 7 years after;
- Where we hold your data in connection with the marketing or promotion of our business, we will hold your data for up to 7 years, or for up to 7 years after you last communicated with us, if later.
- In respect of website usage data, we hold your data for 7 years from the date of collection
Where we store your personal data
- All information we hold about you is stored on Microsoft Azure servers within the United Kingdom.
- The data that we collect from you may be transferred to, and stored at, a destination outside the UK or European Economic Area ("EEA"). It may also be processed by staff operating outside the UK or EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the processing of your payment details and the provision of support services.
- We will not transfer your personal data outside the UK or EEA without ensuring it is subject to appropriate safeguards (for example subject to a European Commission approved contract).
Your Rights
Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:
- Access to your personal data and to certain other supplementary information that this Notice is already designed to address
- Require us to correct any mistakes in your information which we hold
- Require the erasure of personal data concerning you in certain situations
- Receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- Object at any time to processing of personal data concerning you for direct marketing
- Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- Object in certain other situations to our continued processing of your personal data
- Otherwise restrict our processing of your personal data in certain circumstances
- Claim compensation for damages caused by our breach of any data protection laws.
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.
If you would like to exercise any of those rights, please:
- Email, call or write to us;
- Let us have enough information to identify you (e.g. Atyourtime registration details);
- Let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill); and
- Let us know the information to which your request relates, including any reference numbers if you have them.
How to complain
We hope that we can resolve any query or concern you raise about our use of your information.
The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred.
The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/ or telephone: 0303 123 1113.
Changes to our privacy notice
We reserve the right to modify this Notice at any time. Any changes we may make to our Notice in the future will be notified and made available to you using Atyourtime. Your continued use of the services and Atyourtime shall be deemed your acceptance of the varied Notice
Information About Our Use of Cookies and IP Addresses
We may collect information about your mobile phone, computer or other device from which you access Atyourtime, including where available your IP address, operating system and browser type, for systems administration and to report aggregate information to third parties affiliates. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual. We may, however, use such information in conjunction with the data we have about you in order to track your usage of our services.
Atyourtime uses cookies to distinguish you from other users of Atyourtime. This helps us to provide you with a good experience when you browse Atyourtime and also allows us to improve Atyourtime. By using Atyourtime you agree to our use of cookies as more specifically set out below.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
The cookies we use include:
- “Analytical” cookies. They allow us to recognise and count the number of visitors and to see how visitors move around Atyourtime when they are using it. This helps us to improve the way our Website works, for example, by ensuring that users are finding what they are looking for easily.
- “Strictly necessary” cookies. These are cookies that are required for the operation of Atyourtime. They include, for example, cookies that enable you to log into secure areas of Atyourtime, use a shopping cart or make use of e-billing services.
- “Functionality” cookies. These are used to recognise you when you return to Atyourtime. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
- “Targeting” cookies. These cookies record your visit to Atyourtime, the pages you have visited and the links you have followed to our affiliates websites. We will use this information to make Atyourtime, offers e-mailed to you and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
Please note that third parties affiliates may also use cookies, over which we have no control.
Cookies which are strictly necessary for the core functionality of Atyourtime are enabled by default, and set automatically at the point you access Atyourtime.
Any cookies which are not strictly necessary for the functioning of Atyourtime will not be set unless you expressly consent to them through the cookie banner by clicking “accept”.
You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of Atyourtime.
Contact
All questions, comments and requests regarding this Privacy and Cookies Notice should be addressed to feedback@atyourtime.com write to us at Atyourtime Limited, Churchill House, Stirling Way, Borehamwood, Hertfordshire, United Kingdom, WD6 2HP.
Trusted Integrations
We partner with industry leading platforms to deliver seamless experiences
