# Privacy Policy

Last updated: 20 July 2026

Go Host Ltd ("we", "us", "our") operates the Got2Eat platform, including our directory, listing, and menu services for takeaway businesses and customers.

This Privacy Policy explains what personal data we collect, how we use it, and your rights.

## 1. Data Controller

Data Controller: Go Host Ltd

Product: Got2Eat

Privacy Officer: Michael Brown

Privacy contact: use the contact details shown on this page.

## 2. Personal Data We Collect

We may collect and process the following categories of data:

- Account data: name, email address, password hash, login identifiers.
- Authentication data: OAuth provider data when you sign in with services such as Google or Facebook.
- Business profile data: takeaway name, business description, contact details, postcode/location, website, opening hours, categories, and menu content.
- Billing data: subscription status, plan details, billing events, and invoice references (processed through Stripe; we do not store full card numbers).
- Usage and technical data: IP address, device/browser data, pages viewed, interactions, timestamps, and log events.
- Customer support data: any data you provide when you contact us.

## 3. How We Use Personal Data

We use personal data to:

- Provide and maintain the Got2Eat service.
- Create and manage user accounts and business listings.
- Display public listing and menu content you choose to publish.
- Process subscriptions and billing through Stripe.
- Improve platform performance, security, search quality, and user experience.
- Respond to support requests and service communications.
- Comply with legal and regulatory obligations.

## 4. Lawful Bases (UK GDPR)

Depending on context, we process data under one or more lawful bases:

- Contract: where processing is necessary to provide the service you requested.
- Legitimate interests: to operate, secure, and improve our platform.
- Legal obligation: where required by applicable law.
- Consent: where you have given permission (for example, optional communications/cookies where required).

## 5. Sharing of Data

We share data only when necessary, including with:

- Service providers who help us operate Got2Eat (hosting, analytics, security, communications).
- Payment provider Stripe for subscription and invoice processing.
- Professional advisers and authorities where legally required.

We do not sell your personal data.

## 6. Data Retention

We keep data only as long as necessary for service delivery, legal, tax, accounting, fraud prevention, and dispute resolution obligations. Retention periods vary by data type and legal requirements.

## 7. International Transfers

Some providers may process data outside the UK. Where this happens, we use appropriate safeguards required by law (for example, contractual protections).

## 8. Security

We apply reasonable technical and organisational measures to protect personal data. No system can be guaranteed 100% secure, but we continuously improve our safeguards.

## 9. Your Rights

Subject to applicable law, you may have rights to:

- Access your personal data.
- Request correction of inaccurate data.
- Request deletion of your data.
- Restrict or object to certain processing.
- Request portability of eligible data.
- Withdraw consent where processing relies on consent.
- Lodge a complaint with the UK Information Commissioner's Office (ICO).

## 10. Children's Privacy

Got2Eat is not directed at children. We do not knowingly collect personal data from children where prohibited by law.

## 11. Third-Party Links

Our platform may link to third-party websites. Their privacy practices are governed by their own policies.

## 12. Changes to This Policy

We may update this policy from time to time. The latest version will appear on this page with the updated date.