Privacy Policy

1. Who We Are (Data Controller)

DinebyMe (“we”, “us”, “our”), operating at dinebyme.co.uk, is the data controller for personal information collected through this website. For any privacy or data protection queries, contact Info@DineByme.co.uk.

2. Information We Collect

• Account Details: Email address, display username, and anonymised demographic bracket (Sex and Age Bracket) when you register via Supabase Auth.
• Zero-Retention AI ID Verification (Immediate Deletion): When you verify your identity during sign-up, our ephemeral AI vision check (/api/verify-id) inspects the ID image strictly in volatile memory (RAM) to confirm authenticity and age (16+). The ID image and document number are permanently deleted immediately upon verification and are never written to our database or cloud storage buckets. Only a boolean status (id_verified: true), your Sex, and your Age Bracket are retained.
• Reviews & Blogs: Star ratings, written comments, food blog posts, and optional food photos you choose to publish publicly.
• Table Bookings: Your name, email/phone, party size, date/time, and dietary notes shared with the restaurant you book.
• Saved Bucket-List Spots & Club Card: Venues you bookmark and promotional discount codes sent to your account by restaurants.
• Location (Optional): If you click “Use my live location” or enter a UK postcode, coordinates are used in your browser to calculate distance in miles and are not stored on our servers.

3. Lawful Basis & How We Use Your Data

Under UK GDPR and the Data Protection Act 2018, we process your data to perform the services you request (managing your account, bookings, saved lists, and Club Card rewards) and under legitimate interests to maintain accurate halal restaurant listings and prevent spam or abuse.

4. Data Processors & Third Parties

We do not sell your personal data. Our infrastructure uses trusted processors:

• Supabase: Secure database, user authentication, and review photo storage.
• Vercel: Cloud web hosting and edge content delivery for dinebyme.co.uk.
• Postcodes.io & Google Maps: Public UK postcode geocoding and restaurant photo/map display.

5. Your UK GDPR Rights

You have the right to access, correct, export, or request deletion of your personal data at any time. To exercise these rights or delete your account, email Info@DineByme.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.