Website Privacy Notice

1. Who we are

Smart Eatx is run by Smart Approaches Limited, trading as Smart Eatx, a company registered in England and Wales (company number 14796914), whose registered office is at 4 Admiral Way, Regus House, Doxford International Business Park, Sunderland, Tyne and Wear, SR3 3XW. We're the controller of the personal data described in this notice. That means we decide how and why it's used, and we're responsible for it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You can contact us about anything in this notice by emailing hello@smarteatx.com, or by post at our registered office.

2. What this notice covers

This notice covers smarteatx.com: browsing it, the Contact and Book a Demo forms, and emails you send to the addresses it shows.

Using one of our services is covered by that service's own privacy notice instead. For example, that includes ordering in the Smart Eatx app, riding with us, sending a parcel, or running a restaurant on our platform. You'll find each one on our legal page.

3. What we collect

When you send a form. The forms ask for different things depending on what you need:

• Contact details: your name, email address and phone number.
• About your business: its name, city and address, the platforms you use now, roughly how many orders you take a day, whether you have your own app, and the services you're interested in (delivery, riders, a till system, a plan).
• Your message: the subject and anything you write to us, and when you'd like us to call.
• How you found us: the page you sent the form from, and any campaign tags (such as utm_source) in the link you arrived by.
• Your agreement: the exact words shown beside the button you pressed, and when you pressed it, so we have a record of what you were told.

Please don't put sensitive information in your message, such as details about your health. We don't need it.

When you visit. Like every website, ours receives the technical details your browser sends: your IP address, browser and device type, the page you asked for and the page that linked you. Our hosting provider, Cloudflare, uses them to deliver the site and protect it from attacks. Its analytics tool counts visits, as our Cookie Policy explains.

To stop abuse. When you send a form, we use your IP address and email address for up to an hour to limit how many forms can be sent from one place. A hidden field catches automated spam. We don't keep your IP address with your enquiry.

4. How we use it, and our lawful basis

UK GDPR says we must have a lawful basis for each use of your data. Here's ours:

Where we rely on legitimate interests, we've weighed them against your rights. The uses above are ones you'd expect when you contact a business. You can object to any of them, as the Your rights section explains.

We'll only use your details to deal with your enquiry. We won't add you to a marketing list or send you newsletters unless you ask us to.

You don't have to give us your details, but without a way to contact you we can't answer your enquiry.

5. Who sees your data

Your enquiry is seen by the Smart Eatx team who handle sales and onboarding. The full enquiry is emailed to our sales inbox. Our team chat is told a new enquiry has arrived, without your personal details.

We use these service providers. They act only on our instructions, under contracts that require them to keep your data safe:

We never sell your personal data. We'd only share it with others if the law required it, for example a court order, or to protect someone's safety.

6. Data sent outside the UK

Some of our providers handle data outside the UK. Data stored in the European Economic Area is protected by UK adequacy regulations, which recognise its laws as protecting your data properly.

For providers in the United States, we rely on the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it. Otherwise we use the Information Commissioner's International Data Transfer Addendum to the EU standard contractual clauses. You can ask us for a copy of the safeguards that apply.

7. How long we keep it

8. Keeping it safe

The website and the forms only work over encrypted connections (HTTPS). Enquiries are stored on servers with restricted access. Only the team members who handle enquiries can see them.

9. Your rights

Under UK GDPR you have the right to:

• see the personal data we hold about you, and get a copy;
• correct anything that's wrong or incomplete;
• have it deleted, where we have no good reason to keep it;
• restrict how we use it while a concern is looked into;
• object to our using it on the basis of legitimate interests. We'll stop unless we have compelling reasons;
• move it: get data you gave us in a format a computer can read, where we use it to take steps towards a contract with you;
• withdraw your consent at any time, where we rely on it.

To use any of these, email hello@smarteatx.com. We'll answer within one month. It's free, unless a request is clearly unfounded or excessive. We may need to confirm who you are first.

We don't make any decisions about you by automated means alone.

10. Complaints

If you're unhappy with how we've handled your data, please tell us first at hello@smarteatx.com. We'll try to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

11. Children

Our website is for businesses and adults. It isn't meant for children under 18, and we don't knowingly collect their data through it.

12. Changes to this notice

We'll update this notice when how we use data changes. The date at the top shows when it last changed. If a change matters to you and we have your contact details, we'll tell you.