Privacy Policy

Who we are

Pluzo operates a guest loyalty programme for its participating restaurant venues in the United Kingdom. This policy explains how we handle your personal data across the Pluzo loyalty mobile app, in-venue registration, and our guest-facing web forms. It applies whenever you join or use the loyalty programme through any of these channels.

Information we collect

We collect the following categories of personal data:

• Identity and contact details — your name, email address, mobile number, postal address and postcode, date of birth, and, if you choose to share them, your spouse or partner's birthday and your wedding anniversary.
• Loyalty activity — your visits, spend, points balance, vouchers, and offer redemptions.
• Feedback — any feedback or comments you choose to submit to us.
• Technical data — basic technical information needed to operate the app securely and reliably.

How we collect it

We collect this information directly from you: when you register in the Pluzo app, when you sign up at one of our venues with a team member, or when you complete our online sign-up form.

How we use it and our lawful bases

Under UK GDPR we must have a lawful basis for using your personal data. We rely on the following:

• Running the loyalty programme and your account — this is necessary for the performance of our contract with you.
• Marketing emails — we send these only with your consent. You can withdraw consent at any time using the unsubscribe link in every email or through your in-app communication preferences.
• Service and transactional messages — we send these under our legitimate interest in operating your account and the programme.
• Programme analytics — we analyse programme performance under our legitimate interest in understanding and improving how the loyalty programme works.

Who we share it with

We share your data only with service providers who act as processors on our behalf and only to the extent needed to deliver the programme. These include email delivery (Amazon Web Services SES), cloud hosting, and image storage and content delivery. We do not sell or rent your personal data, and we do not share it for third-party advertising.

Where your data lives

Your data is hosted in the United Kingdom. Some of our processors may process data in other regions; where they do, this is covered by safeguards recognised as adequate under UK data protection law.

How long we keep it

We keep your personal data while your account is active. When you delete your account, or on a verified request, we delete or anonymise your data.

Your rights

Under UK GDPR you have the right to access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. You can delete your account directly in the app under Profile. To exercise any other right, contact us using the details below. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Marketing choices

You control the marketing you receive. Every marketing email includes an unsubscribe link, and you can update your preferences at any time through the in-app communication preferences.

Children

The loyalty programme is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with their data, please contact us and we will remove it.

Cookies

Our web pages use essential cookies only, which are needed for the pages to work. We do not use advertising or cross-site tracking cookies.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.

Contact us

If you have any questions about this policy or how we handle your personal data, contact us at privacy@pluzo.co.uk.