Privacy Policy

1. Who we are

Bitelist is operated by Bitelist Group Ltd. We are responsible for deciding how personal information collected through Bitelist is used.

2. Information we collect

Depending on how you use Bitelist, we may collect:

• Contact and enquiry information such as your name, email address, telephone number and the content of messages you send us.
• Restaurant representative information such as your name, role, business contact details, listing-change requests, BiteCard offer submissions and information used to verify your connection to a restaurant.
• Account information used for Bitelist Business, BiteCard or other Bitelist accounts, including login identifiers, account status and account activity.
• BiteCard information when membership is available, such as membership status, eligible referral attribution and restaurant redemption records. Payment providers may process payment-card information; Bitelist does not need to store your full card details.
• Waitlist and marketing preferences where you ask for launch updates or choose to receive communications.
• Technical and security information such as IP address, browser/device information, server logs, authentication/security events and cookie or consent preferences where applicable.
• Restaurant listing information from restaurants, public sources and authoritative datasets. This is primarily business information, but it can sometimes contain personal business-contact information.

3. How we use information and our lawful bases

We use personal information only where we have a lawful basis. Depending on the context, this may include:

• Contract or steps before a contract — to create and administer accounts, provide requested services, operate BiteCard membership, respond to service requests and deliver Partner Services where agreed.
• Legitimate interests — to operate and improve the Bitelist restaurant directory and discovery platform, verify restaurant representatives, prevent misuse and fraud, maintain security, keep business listings accurate and communicate with businesses about their Bitelist listing or relevant Bitelist services where the law permits.
• Consent — for optional marketing and non-essential storage/access technologies where consent is required. You can withdraw consent at any time.
• Legal obligations — where we need to keep or disclose information to comply with law, tax, accounting, regulatory or law-enforcement requirements.

4. Restaurant directory and public-source information

Bitelist combines restaurant information from restaurants themselves, public or authoritative datasets and other legitimate business-information sources. We use this to create and maintain restaurant listings and local discovery features. If you represent a restaurant and believe a listing contains incorrect information, you can contact us or use the claim/update process.

5. Marketing and business communications

We may contact restaurant representatives about their Bitelist listing, verification, BiteCard participation or relevant business services where we have a lawful basis to do so. Optional consumer marketing is sent only where permitted. You can opt out of marketing at any time; service, security and transactional messages may still be sent where necessary.

6. Who we share information with

We do not sell personal information. We may use trusted service providers to operate Bitelist, including website/hosting, database and authentication, CRM, email/communications, mapping or location services, analytics or security services, and payment providers when paid membership is active. We may also share information with professional advisers, regulators, courts or public authorities where required.

Current Bitelist infrastructure includes services such as WordPress, Supabase, Zoho and Google services. Providers process information under their own contractual and security arrangements.

7. International processing

Some service providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, we use an appropriate transfer mechanism or rely on another lawful safeguard available under UK law.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected. Retention depends on factors such as the type of record, whether an account or business relationship remains active, legal/accounting requirements, security and fraud-prevention needs, disputes and whether consent has been withdrawn. We delete or anonymise information when it is no longer required, unless the law requires us to keep it longer.

9. Your rights

Depending on the circumstances, UK data-protection law may give you rights to request access, correction, deletion, restriction, portability or objection to certain uses of your personal information. Where processing is based on consent, you can withdraw that consent. You also have the right to object to direct marketing.

To exercise a right, contact us using the details on this page. We may need to verify your identity before acting on a request.

10. Complaints

Please contact us first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO).

11. Cookies and similar technologies

Bitelist uses storage and access technologies where needed to operate the website and may use optional technologies for measurement or other features. See our Cookies page for more information.

12. Changes to this notice

We may update this notice as Bitelist develops. The latest version and its update date will be published on this page.