Privacy Policy

1. Who we are

Slerp Limited (“Slerp”, “we”, “us”, “our”) is committed to protecting the privacy of visitors to our website (slerp.com) and those who interact with our services through web or mobile applications (together, the “Services”). This Privacy Policy explains how we collect, use, share and protect personal data.

Important: This is Slerp’s corporate Privacy Policy. If you place an order with a restaurant or hospitality business using technology powered by Slerp (a “Merchant”), that Merchant is typically the data controller for your order and account data and their privacy notice will apply. Slerp typically acts as a data processor for the Merchant in those contexts, except where we act as an independent controller for limited purposes (see section 6).

2. Personal data we collect

A. Data you provide to us

• Contact details (e.g. name, email address, phone number) when you complete forms, request a demo, subscribe, or contact support.
• Communications (e.g. emails, messages, support tickets, call notes).
• Business information (e.g. company name, role, locations) where relevant to providing services to businesses.

B. Data we collect automatically

• Technical data (e.g. IP address, browser type, device identifiers, operating system, referral URLs).
• Usage data (e.g. pages viewed, clicks, interactions, time on site, approximate location derived from IP).
• Cookie and similar technology data (see section 10).
• If you access our Services via mobile devices, we may collect device and performance data and, depending on your device settings and permissions, limited location-related data.

C. Data processed via Merchants (where applicable)

Where Slerp provides ordering and delivery-enablement technology to Merchants, we may process personal data relating to end customers (e.g. name, contact details, delivery address and order details) on behalf of the Merchant to facilitate ordering, fulfilment, delivery enablement and support. Merchants determine the purposes and means of processing and are the primary controllers for that data.

3. How we use personal data and our lawful bases

We process personal data only where a lawful basis under UK GDPR applies. Depending on the context, this may include:

• Performance of a contract — to provide the Services you request, respond to support requests, and administer accounts.
• Legitimate interests — to operate, maintain, improve and secure our Services, prevent fraud, and understand how our Services are used (balanced against your rights).
• Consent — for certain marketing communications and non-essential cookies (you can withdraw consent at any time).
• Legal obligation — to comply with applicable laws and lawful requests.

Examples of purposes

• Provide and administer our Services and website functionality.
• Respond to enquiries, provide customer support, and manage relationships with prospective and existing customers.
• Send service messages (e.g. important operational updates).
• Improve, troubleshoot and monitor performance and security of our Services.
• Detect and prevent fraud, abuse and security incidents.
• Comply with legal, regulatory and contractual obligations.

4. Marketing

Where you have opted in (or where permitted by law), we may contact you about Slerp products, services, events and content via email and other channels. You can opt out at any time by using the unsubscribe link in our emails or by contacting us at [email protected].

If we ever share your data with third parties for their own direct marketing, we will only do so where you have provided any required consent and you can opt out at any time.

5. Disclosure and sharing of personal data

We may share personal data with:

• Service providers (processors/sub-processors) who help us host, operate, support, analyse, and secure our Services (e.g. hosting, analytics, communications, customer support tools), subject to contractual confidentiality and security obligations.
• Merchants where necessary to provide Services, support, and (where applicable) order fulfilment.
• Payment providers where applicable. (Slerp does not store full payment card details.)
• Courier partners where delivery enablement is requested. Courier partners typically act as independent controllers for delivery services and use personal data to perform the delivery.
• Professional advisers (lawyers, accountants, insurers) where necessary.
• Authorities (regulators, law enforcement) where required by law or where necessary to protect rights, safety, and security.
• Corporate transactions — if we enter into a merger, acquisition, reorganisation or sale of assets, personal data may be disclosed to relevant parties and advisers, subject to appropriate safeguards.

6. When Slerp acts as a controller vs processor

In many cases (especially for Merchant end-customer data), Slerp acts as a processor on behalf of the Merchant. In limited circumstances, Slerp may act as an independent controller, for example to:

• Maintain and secure our platform, including fraud prevention and abuse detection.
• Perform aggregated analytics and service performance measurement.
• Comply with legal obligations and enforce our terms.
• Manage support interactions that are handled directly by Slerp (where relevant).

7. Feedback and testimonials

If you submit comments, reviews or feedback about Slerp or our Services, we may use them on our website or in marketing materials. Where we do so, we will use only the level of attribution you have agreed to (for example, first name and city) and you can ask us to remove this at any time by contacting [email protected].

8. Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no internet transmission is completely secure, and transmission is at your own risk.

Where you have chosen (or are provided with) a password to access parts of our Services, you are responsible for keeping it confidential.

9. Data retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide Services, meet legal and accounting requirements, resolve disputes and enforce agreements. Retention periods vary depending on the type of data and the context in which it is processed.

10. Cookies and similar technologies

We use cookies and similar technologies to operate and improve our website, understand usage, and (where applicable) deliver marketing and analytics. You can manage cookie preferences via our cookie banner (where available) and through your browser settings.

11. International transfers

Personal data may be processed outside the United Kingdom. Where this happens, we use appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement (IDTA) and/or the UK Addendum to EU Standard Contractual Clauses, or adequacy regulations where applicable.

12. Your rights

Depending on your circumstances, you may have rights under UK data protection law including the right to access, correct, delete, restrict or object to processing, and the right to data portability in certain situations.

If your request relates to data that a Merchant controls (for example, end-customer order data), you should contact the Merchant directly. If you contact Slerp, we may direct or relay your request to the relevant Merchant where appropriate.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post changes on this page and, where appropriate, notify you through other channels.

14. Contact

If you have questions or requests regarding this Privacy Policy or our use of personal data, contact us at: [email protected].