Privacy Policy

1. Data Controller

The data controller is:
SR SHOP LIMITED
Company Number: 15567608
71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM
Email: support@dropeat.co.uk

2. Data We Collect

We only collect data that is strictly necessary, including:

• First and last name
• Email address
• Phone number
• Professional information where required
• Payment data (processed exclusively by secure payment providers)
• Technical browsing data (necessary and consented cookies)

3. Purposes of Processing

• Managing registrations, training and support services
• Connecting operators and partner restaurants
• Operational communications and customer support
• Contract management and invoicing
• Website security and abuse prevention
• Compliance with legal and regulatory obligations

4. Legal Bases

• Performance of a contract or pre-contractual measures
• Explicit consent where required
• Applicable legal obligations
• Legitimate interests related to security and service continuity

5. Data Related to Matchmaking

Data shared as part of a matchmaking request is:

• Used exclusively for that purpose
• Shared only with the parties concerned
• Deleted immediately after a successful match, unless otherwise required by law

6. Data Recipients

Data may only be accessed by:

• SR SHOP LIMITED
• Strictly necessary technical service providers
• Partners directly involved in the matchmaking

No data is sold or rented.

7. Tools, Processors and Cookies

• Analytics: Google Analytics (GA4), enabled only after consent
• Marketing pixels: Meta / TikTok, enabled only after consent
• Security: Google reCAPTCHA
• Payments: Stripe, Viva, Klarna

Non-essential cookies are placed only after explicit consent. You can withdraw your consent at any time via the cookie preference settings.

8. Transfers Outside the EU / UK

Some service providers may involve transfers of data outside the European Union or the United Kingdom. Where applicable, such transfers are governed by recognised contractual mechanisms that ensure an adequate level of protection.

9. Data Retention

Data is retained only for as long as necessary for the purposes described, and is then deleted or anonymised in line with applicable legal requirements.

10. Data Security

Appropriate technical and organisational measures are implemented to protect data against unauthorised access, loss, alteration or disclosure.

11. Your Rights

• Right of access
• Right to rectification
• Right to erasure
• Right to object
• Right to restriction of processing

Requests can be sent to: support@dropeat.co.uk

12. Governing Law

This policy is governed by English law. Users residing in the European Union benefit from mandatory provisions of the GDPR where such provisions provide stronger protection.