Guest Privacy Policy

Last Updated: 4/4/25

Version: 1.01

1. Introduction

DVZ ZUMI UK LIMITED (“Zumi”, “we”, “us”, or “our) is committed to safeguarding the privacy policy of all end users (“you” or Your”). We operate under the UK General Data Protection Regulation (UKGDPR) and the Data Protection Act 2018.

This Privacy Policy Extension supplements Our clients Privacy Policy by outlining additional details relating to the operation of the Zumi web-based  This extension applies solely to the end-user (guest) services provided via the platform, which integrates with third party platforms. It utilises AI-assisted automated systems to enhance user experience. It does not apply to data processed for restaurant clients or other business partners.

By accessing or using the Zumi web-based platform, you agree to collect, use, and disclose your personal data as described in both our clients Privacy Policy and this Extension.

2. Scope and Applicability

This document applies to personal data collected from end users of the Zumi web-based platform. It covers:

• Data collected directly from you (e.g. reservation details, contact information, and preferences)
• Data is processed automatically through cookies and tracking technologies
• Data used for facilitating reservations, payment processing via third party platforms, and for loyalty programmes
• Data processed through automated systems and AI-assisted models for service recommendations

Data processed on behalf of restaurant partners is covered under separate agreements and policies.

3. Definitions

For this Extension, the following definitions apply:

• End User: Any individual using the Zumi web-based platform to, process payments, or engage with loyalty programmes.
• Zumi Web-Based Platform: The online platform allows end users to access services, including live bill access, and online payments.
• Third party platforms: The third-party platforms are integrated into the platform.
• Payment Processor: Secure third-party services (including those provided by third party platforms) that handle payment transactions, e.g Stripe or Freedompay.
• AI-Assisted Model / Automated Decision Making: Computer-based processing that uses historical and real-time data to generate personalised recommendations, streamline service delivery, and improve the customer experience.

4. Data Collection

In addition to the data outlined in our clients Privacy Policy, the Zumi web-based platform collects the following:

• Reservation Information: Including your name, telephone number, email address, dietary requirements, special requests, and accessibility needs.

Payment Information: Third party platforms secure system collects personal data necessary to process payments. Note that payment card details are handled exclusively by the designated Payment Processor.

• Additional Information: This includes data such as user preferences, details of loyalty programme participation, and any notes entered by restaurant staff.
• Automated Data: Usage data collected through cookies, tracking technologies, and log files that help us improve the platform’s performance and user experience.

5. How We Use Your Data

Your personal data is used for several purposes, including:

• Payments: To enable you to pay for experiences.
• Enhancing the Customer Experience: Data is used to personalise your experience on the platform, including through targeted loyalty offers and marketing communications.
• AI-Assisted Service Recommendations: AI-assisted models can automatically process your data to generate personalised recommendations. These models analyse your previous interactions and preferences to enhance service quality. This automated processing does not result in decisions that have legal or similarly significant effects
• Operational and Analytical Purposes: To maintain, troubleshoot, and improve the platform, including monitoring performance and usage patterns.

6. Automated Decision Making and AI

We use automated systems, including AI-assisted models, to:

• Analyse user data and generate recommendations (e.g. personalised offers, dining suggestions, and loyalty rewards).
• Streamline operational processes within the platform.

Key Points:

• Transparency: While the AI processes operate automatically, the logic is based on historical usage data and established algorithms designed to enhance your experience.
• Human Oversight: Without human intervention, no solely automated decision will result in any legal or significant adverse effect. You have the right to request human review of any decisions made based on automated processing.
• Your Rights: If you have concerns or questions about how these systems work or wish to challenge any outcome, please contact us as detailed in Section 10.

7. International Data Transfers

Although the Zumi web-based platform is primarily designed for users within the UK, your personal data may be transferred to and processed in jurisdictions outside the UK. In such cases, we ensure that:

• Safeguards are in Place: Appropriate measures such as Standard Contractual Clauses or other approved transfer mechanisms are implemented to protect your data.
• Compliance: All international transfers comply with UK GDPR and relevant data protection laws.

8. Cookies and Tracking Technologies

The Zumi web-based platform utilises cookies and similar tracking technologies to:

• Enhance user experience and personalise content.
• Analyse usage patterns and platform performance.
• Provide targeted marketing and loyalty programme offers.

You have the right to manage your cookie preferences through your browser settings or via any opt-out tools provided within the platform. For more detailed information on cookies, please refer to our Cookies Policy.

9. Data Security

We are committed to safeguarding your personal data and have implemented appropriate technical and organisational measures, including:

• Encryption: Data is transmitted using secure encryption protocols.
• Access Controls: Strict access controls are in place to limit data access to authorised personnel.
• Secure Storage: Personal data is stored on secure servers with regular security assessments.
• Incident Response: We have procedures to manage data breaches and minimise any potential harm.

While no method of data transmission or storage is entirely secure, we continuously review our security practices to maintain high standards.

10. Your Rights and How to Exercise Them

Under UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct any inaccurate or incomplete data.
• Erasure: Request deletion of your personal data under certain circumstances.
• Restriction: Request restrictions on how we process your data.
• Objection: Object to certain processing activities, including automated profiling.
• Portability: Request your data in a commonly used format.

To exercise these rights:
Don't hesitate to get in touch with our Data Protection Team at:
Email: hi@zumi.app
Address: 16 Great Queen Street, Covent Garden, London, United Kingdom, WC2B 5AH

After receiving your request, we will respond within the required timeframe and offer guidance on any additional steps.

11. Data Sharing and Third Parties

Your personal data may be shared with:

• Restaurants: To manage your reservations and enhance service delivery.
• Third party platforms and Payment Processors: For payment processing.
• Other Service Providers: Only as necessary for providing our services or as required by law. We do not sell your personal data to third parties.

Any sharing with third parties is subject to strict contractual and security safeguards to ensure your data is handled in compliance with this Extension and applicable laws.

12. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Reservation Information: Up to 12–24 months after your last interaction.
• Transaction Records: Retained for 6–7 years to meet financial or legal obligations.
• Loyalty Programme Data: Retained until you opt out or withdraw consent.

After these periods, your data will be securely deleted or anonymised in accordance with our retention policies.

13. Changes to This Privacy Policy Extension

We may update this Extension from time to time. Any changes will be posted on our website and, where appropriate, communicated directly to you. Your continued use of the Zumi web-based platform after any changes signifies your acceptance of the updated terms.

14. Complaints and Dispute Resolution

If you have any concerns or complaints regarding our processing of your personal data, please get in touch with us at hi@zumi.app. You also have the right to complain with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Web: www.ico.org.uk

Telephone: 0303 123 1113
Fax: 01625 524510

15. Contact Information

For any questions or further information regarding this Privacy Policy Extension, please contact:

Data Protection Officer
Email: hi@zumi.app
Address: 16 Great Queen Street, Covent Garden, London, United Kingdom, WC2B 5AH
Phone: +44 7456 531456