Privacy Policy

Last updated: 4 August 2026

1. Who we are

Slerp Limited (“Slerp”, “we”, “us”, “our”) is a company registered in England and Wales, company number 10222686, with its registered office at 71 Fanshaw Street, 2nd Floor, London N1 6LA. Slerp is the data controller responsible for the personal data described in this Privacy Policy.

We are committed to protecting the privacy of visitors to our website (slerp.com) and of those who interact with our services through web or mobile applications (together, the “Services”). This Privacy Policy explains how we collect, use, share and protect personal data.

Important: This is Slerp’s corporate Privacy Policy. It covers our website, our marketing, our relationships with the businesses we work with, and people who apply to work with us.

If you are a customer who has placed an order with a restaurant or hospitality business using technology powered by Slerp (a “Merchant”), different arrangements apply. For that order data, Slerp and the Merchant are joint data controllers, and Slerp is the sole controller for certain purposes it decides itself. Please read our Platform & End-Customer Privacy Notice, which explains this in full, including how responsibilities are divided between Slerp and the Merchant and how you can exercise your rights against either of us.

2. Personal data we collect

A. Data you provide to us

  • Contact details (e.g. name, email address, phone number) when you complete forms, request a demo, subscribe, or contact support.
  • Communications (e.g. emails, messages, support tickets, call notes).
  • Business information (e.g. company name, role, locations) where relevant to providing services to businesses.

B. Data we collect automatically

  • Technical data (e.g. IP address, browser type, device identifiers, operating system, referral URLs).
  • Usage data (e.g. pages viewed, clicks, interactions, time on site, approximate location derived from IP).
  • Cookie and similar technology data (see section 10).
  • If you access our Services via mobile devices, we may collect device and performance data and, depending on your device settings and permissions, limited location-related data.

C. Data relating to customers of the Merchants we work with

Where Slerp provides ordering and delivery technology to a Merchant, personal data relating to that Merchant’s customers (for example name, contact details, delivery address and order details) is processed through our Platform in order to take, accept and fulfil orders, to enable delivery, and to provide support.

For that processing, Slerp and the Merchant act as joint data controllers, because we determine together how that personal data is used. Slerp also acts as sole controller for a defined set of purposes it decides itself. Our Platform & End-Customer Privacy Notice sets out the detail, including the essence of the arrangement between Slerp and the Merchant.

D. Data relating to job applicants

  • Application data (e.g. name, contact details, CV, covering letter, work history, qualifications, right to work information).
  • Assessment data (e.g. interview notes, exercise or task submissions, scoring and feedback).
  • References, where we ask for them and you have agreed.

We use this data to assess your application, to communicate with you about it, and to keep a record of our recruitment decisions. We retain unsuccessful applications for a limited period in case a similar role arises, and you can ask us to delete your data at any time.

3. How we use personal data and our lawful bases

We process personal data only where a lawful basis under UK GDPR applies. Depending on the context, this may include:

  • Performance of a contract: to provide the Services you request, respond to support requests, and administer accounts.
  • Legitimate interests: to operate, maintain, improve and secure our Services, prevent fraud, understand how our Services are used, measure our own performance, produce reporting and insight, market our Services to business contacts, and assess applications for employment (balanced against your rights).
  • Consent: for certain marketing communications and non-essential cookies (you can withdraw consent at any time).
  • Legal obligation: to comply with applicable laws and lawful requests, including checking right to work.

Examples of purposes

  • Provide and administer our Services and website functionality.
  • Respond to enquiries, provide customer support, and manage relationships with prospective and existing customers.
  • Send service messages (e.g. important operational updates).
  • Improve, troubleshoot and monitor the performance and security of our Services.
  • Detect and prevent fraud, abuse and security incidents.
  • Produce reporting and insight about how our Services are used, including reporting that combines information across the Merchants we work with. Wherever possible this uses aggregated, anonymised or de-identified data.
  • Assess and administer applications for employment.
  • Comply with legal, regulatory and contractual obligations.

Automated decision-making

We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect on you.

4. Marketing

Where you have opted in, or where you are a business contact and we are permitted to do so by law, we may contact you about Slerp products, services, events and content via email and other channels. You can opt out at any time by using the unsubscribe link in our emails or by contacting us at [email protected].

Slerp does not send marketing communications to the customers of the Merchants we work with. Those communications are decided and sent by the Merchant.

If we ever share your data with third parties for their own direct marketing, we will only do so where you have provided any required consent, and you can opt out at any time.

5. Disclosure and sharing of personal data

We may share personal data with:

  • Service providers (acting as our processors) who help us host, operate, support, analyse and secure our Services, for example hosting, analytics, communications and customer support tools, subject to contractual confidentiality and security obligations.
  • Merchants, in respect of the order data for which Slerp and the Merchant are joint controllers, and otherwise where necessary to provide the Services and support.
  • Payment providers, which act as independent controllers for payment processing. Slerp does not store full payment card details.
  • Courier partners, where a Merchant offers delivery. Slerp holds the relationship with each courier partner and decides which courier is asked to collect a given order. Courier partners act as independent controllers in respect of the delivery itself.
  • Point of sale providers, online marketplaces and menu and order synchronisation providers, where a Merchant uses technology that connects our Platform to its till system or to a marketplace it also sells through. These act as independent controllers in respect of the personal data they use for their own purposes.
  • Professional advisers (lawyers, accountants, insurers) where necessary.
  • Authorities (regulators, law enforcement) where required by law or where necessary to protect rights, safety and security.
  • Corporate transactions: if we enter into a merger, acquisition, reorganisation or sale of assets, personal data may be disclosed to relevant parties and advisers, subject to appropriate safeguards.

We maintain a list of the categories of third party to which personal data may be disclosed in connection with our Services. You can request details by contacting us using the details in section 14.

We do not sell personal data.

6. Slerp’s role as a controller

Slerp is a data controller of the personal data described in this Privacy Policy. Slerp is not a data processor for the Merchants we work with.

In relation to the order data processed through our Platform, Slerp and the Merchant are joint controllers of the processing required to take, accept and fulfil an order, because we determine together how that personal data is used. Neither of us could provide the service alone.

Slerp is the sole controller of processing that it decides itself, including:

  • Maintaining and securing our Platform, including fraud prevention and abuse detection.
  • Investigating incidents, debugging and ensuring the Platform performs reliably.
  • Deciding which courier partner is asked to collect an order, and managing our relationships with courier partners.
  • Handling support interactions that customers start with Slerp directly.
  • Measuring our own performance, and producing reporting and insight, including reporting that combines information across Merchants.
  • Deciding how long personal data is retained within the Platform.
  • Complying with legal obligations and enforcing our terms.

Courier partners, payment providers, point of sale providers and online marketplaces each act as independent controllers of the personal data they receive and use for their own purposes.

Our Platform & End-Customer Privacy Notice explains this in more detail, including how responsibilities are divided between Slerp and the Merchant.

7. Feedback and testimonials

If you submit comments, reviews or feedback about Slerp or our Services, we may use them on our website or in marketing materials. Where we do so, we will use only the level of attribution you have agreed to (for example, first name and city) and you can ask us to remove this at any time by contacting [email protected].

8. Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no internet transmission is completely secure, and transmission is at your own risk.

Where you have chosen, or are provided with, a password to access parts of our Services, you are responsible for keeping it confidential.

9. Data retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the Services, meet legal and accounting requirements, resolve disputes and enforce agreements. Retention periods vary depending on the type of data and the context in which it is processed, and are set out in our data retention policy, which is available on request.

Slerp decides how long personal data is retained within our Platform. Where a Merchant holds a copy of personal data outside our Platform, the Merchant decides how long it keeps that copy.

10. Cookies and similar technologies

We use cookies and similar technologies to operate and improve our website, understand usage, and where applicable deliver marketing and analytics. You can manage cookie preferences via our cookie banner, where available, and through your browser settings.

11. International transfers

Personal data may be processed outside the United Kingdom. Where this happens, we use appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement (IDTA) and/or the UK Addendum to EU Standard Contractual Clauses, or adequacy regulations where applicable.

12. Your rights

Depending on your circumstances, you may have rights under UK data protection law including the right to access, correct, delete, restrict or object to processing, and the right to data portability in certain situations. Where we rely on your consent, you can withdraw it at any time.

Where Slerp and a Merchant are joint controllers of order data, you may exercise your rights against either of us. You do not need to contact both, and you do not need to approach one before the other. In practice the Merchant is often best placed to help with questions about your order, your account with that Merchant, loyalty and marketing, because the Merchant decides those things. If you contact Slerp, we may ask you for details to identify the relevant Merchant, and we will either handle your request ourselves or pass it to the Merchant and support them in responding. We will tell you which.

To exercise your rights, contact us at [email protected]. We will respond within one month, and will tell you if we need longer because your request is complex.

If you are not satisfied with how we have handled your personal data or your request, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We would ask you to contact us first so that we have the opportunity to put things right.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post changes on this page, update the “Last updated” date above, and where appropriate notify you through other channels.

14. Contact

If you have questions or requests regarding this Privacy Policy or our use of personal data, contact us at: [email protected].

Slerp Limited, 71 Fanshaw Street, 2nd Floor, London N1 6LA. Registered in England and Wales, company number 10222686.