Bedworth Bites is committed to respecting the privacy rights of all individuals who interact with Bedworth Bites through its digital ordering services, including websites, mobile applications, phone based ordering and online ordering experiences powered by Flipdish (together, the "Services").
This Privacy Policy covers the use of the Services provided by Bedworth Bites trading as Bedworth Bites ("Bedworth Bites", "we", "us" or "our"). Bedworth Bites is incorporated under company registration number and having its registered address at . This Privacy Policy provides details of the way in which we process personal data in line with our obligations under the General Data Protection Regulation (No. 2016/679) ("GDPR"), the Data Protection Act 2018 and any other laws which apply to us in relation to the processing of personal data (collectively referred to as "Data Protection Laws"). In this Privacy Policy, "controller", "personal data" and "process" (and its derivatives) have the meanings given to those terms in Data Protection Laws.
Personal data generally means information that can be used to individually identify a person, and processing generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure. We are the controller of your personal data processed in connection with the Services. We process your personal data across a range of systems and tools used to support the Services, including our communications platforms.
The purpose of this Privacy Policy is to explain our data processing activities, including how and why we process personal data.
Personal Data We Collect
We collect personal data in relation to you when you provide it directly to us, when third parties provide us with personal data about you or when personal data about you is automatically collected in connection with your use of our Services.
In running and maintaining our Services, we may collect and process the following information:
Personal Data Collected Directly From You
We receive personal data directly from you when you provide it to us through placing a food order, including, but not limited to:
- Biographical and contact information. Information such as name, email address, telephone number.
- Order information. Information such as delivery address, username and payment details.
- Special category data order information. You may choose to include details in your food order that indicate health information of religious beliefs.
- Voice and call data. Information provided over calls (such as order details and/or consumer requests) when you interact with Flipdish's AI Phone Agent in the course of your engagement with a Business. Information including audio recordings, call metadata and transcripts are also processed through your interaction with Flipdish's AI Phone Agent.
Personal Data Collected From Third Party Sources
Flipdish Limited ("Flipdish"), our online ordering technology partner, acts as a joint controller of personal data processed in connection with food orders placed through the Services. Flipdish may provide us with personal data about you where necessary to enable the fulfilment of food orders placed through the Services. This may include biographical and contact information, order information and special category order information. For more information in respect of Flipdish, please see the "How we share data" section below.
Personal Data We Automatically Collect
Some personal data is automatically collected when you use or interact with the Services, such as:
- IP address;
- device identifiers;
- browser information; and
- any personal data contained in cookie data (as explained in the Cookie Policy).
This information is collectively referred to as "Automatically collected information". Automatically collected information may vary depending on how you access or interact with the Services.
Our Legal Justification for Processing Personal Data
The below table sets out how and why we process your personal data as described above, the legal justification that supports this processing and the categories of personal data processed. Where special category data is processed, this is only where such data is voluntarily provided and on the basis of explicit consent.
| Why we process your personal data | Legal justification | Categories of personal data |
|---|---|---|
|
Administration purposes To: fulfil your food order placed through the Flipdish Platform via the Services (including collection or delivery of food); communicate with you; respond to inquiries; and provide support and assistance |
Such processing is necessary for the performance of a contract between you and us. Where you choose to provide special category data order information, the legal justification is your explicit consent | Biographical and contact information, order information, automatically collected data and in certain cases, special category data order information |
| Handling Consumer Calls and Orders via AI Phone Agent. Such calls may be recorded | Such processing is necessary for performance of a contract (order taking and fulfilment). We also process data on the basis of our legitimate interests to ensure quality, system security and to pursue fraud detection. Where you choose to provide special category data, such data is processed on the basis of your explicit consent. Any special category data provided during calls is used solely for the purpose of handling the caller's request and is not used for profiling, marketing or other secondary purposes. |
Biographical and contact information, order information, voice and call data, automatically collected data and where you choose to provide it, special category data order information. |
| Operation of point of sale (PoS) and in-store ordering systems | Such processing is necessary for the performance of a contract with the Business. We have a legitimate interest to ensure operation of the PoS, ensure security and fraud prevention. |
Biographical and contact information, order information, PoS and in-store usage information. Business staff and authorised user information such as name, authorisation details. |
| Personalisation services, troubleshooting and data analysis | We have a legitimate interest to personalise our services to ensure you are provided with the best possible service. We have a legitimate interest in operating and maintaining the Services and to manage, monitor and improve our services. We sometimes use surveys to assist with this |
Biographical and contact information, order information, automatically collected data and in certain cases, special category data order information. Special category data is only processed for these purposes where explicitly provided and on the basis of explicit consent |
| Training, quality monitoring or evaluating the services we provide | Such processing is necessary for the legitimate interests pursued by us in monitoring and improving the Services and ensuring that our users use the Services, as applicable, in accordance with our terms and conditions and policies | Biographical and contact information, order information, automatically collected data and in certain cases, special category data order information |
| Marketing Communications | We may contact you in relation to marketing if permissible under the Data Protection Laws. It is in our legitimate interests to offer such marketing information, deals and promotions to our customers | Biographical and contact information |
| Statistical information that cannot be related back to individuals to help us improve the services we offer | We have a legitimate interest in carrying out certain analytics to ensure the services we provide to you are effective and operate appropriately | User activity on the Flipdish Platform (e.g. duration on a particular page, most popular choices etc.). This data is aggregated so that it is not referable to any individual user |
|
Legal and contractual matters To: ensure the Services are used in accordance with applicable terms and conditions and policies; comply with our legal obligations; enforce and defend our rights and resolve disputes; and comply with our contractual obligations relating to service providers |
We have a legitimate interest in ensuring that our services and the Services are used in accordance with our terms and conditions of use and policies and to protect against or deter fraudulent, illegal or harmful actions. Where necessary for the purpose of complying with our legal obligations such as in respect of taxation, accounting, payment card rules and standards, data protection, consumer and public health laws or adhering to court orders. We have a legitimate interest in establishing, exercising or defending a legal claim, a prospective legal claim, legal proceedings or prospective legal proceedings and in resolving disputes |
Biographical and contact information, order information, automatically collected data and in certain cases, special category data order information |
|
Corporate matters To: administer our financial and taxation affairs; and facilitate internal and external audits and corporate transactions |
Such processing is in our interest to ensure prudent and effective management of our business and to scale and develop our business. We also have legal obligations in respect of legal and financial matters under company law and accounting regulations | Biographical and contact information, order information and automatically collected data |
|
Disclosure requests To: comply with our legal obligations |
We will disclose personal data where we receive a legally binding request to disclose personal data from law enforcement or other bodies or where we have a legitimate interest in assisting law enforcement or other agencies in respect of an investigation | Biographical information, contact information, reward information and employment information |
Marketing
We will only send marketing communications in compliance with Data Protection Laws. If you wish to stop receiving marketing communications from us, you can opt out at any time by clicking the "opt-out" link at the bottom of any marketing communication from us or by contacting us at the e-mail provided on the Services.
Individual Data Subject Rights
Data Protection Laws provide certain rights in favour of data subjects (the "Data Subject Rights").
Data Subject Rights include the right to:
- receive information about the processing of your personal data, including the information provided in this Privacy Policy;
- access personal data;
- rectify or erase personal data (i.e. right to be forgotten);
- restrict processing;
- data portability;
- withdraw consent to processing based on consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal;
- object to processing of personal data based on legitimate interests and object to processing of personal data for direct marketing purposes;
- object to automated decision-making (including profiling), where applicable under Data Protection Laws; and
- complain to any competent data protection supervisory authority.
These Data Subject Rights will be exercisable by you subject to limitations as provided for under Data Protection Laws.
Automated Processing and AI-Supported Services
Some interactions with the Services may involve automated processing, including AI-powered systems such as the Flipdish AI Phone Agent, which handles calls, takes orders and routes requests. These processes are designed to support service delivery and do not produce legal or similarly significant effects without human involvement. The table above sets out how your personal data may be processed through the use of AI-powered systems.
You may make a request to us to exercise any Data Subject Right by contacting the e-mail address provided on the Services. Your request will be dealt with in accordance with Data Protection Laws.
Disclosing your Information
We and Flipdish, our online ordering technology partner, are joint controllers of personal data processed in connection with food orders placed through the Services. We may disclose personal data to Flipdish, including biographical and contact information, order information and special category order information. If you have queries regarding how your personal data is processed by Flipdish or wish to exercise your rights in respect of such processing, you may contact Flipdish directly
Flipdish acts as a processor in assisting us with managing users' consent to our marketing communications. Flipdish also acts as a processor when it assists us to manage our analytics. This Privacy Policy and our notices govern marketing activities and analytics conducted by Flipdish acting as a processor on our behalf.
We may engage other companies and people to perform tasks on our behalf and may need to share your information with them to provide you with our services.
These other companies and people include:
- Delivery service providers. To be able to provide food delivery services, these providers receive your biographical and contact information and order information.
- Hosting service providers. To be able to provide online hosting services, these providers receive your biographical and contact information, order information and special category data information.
- Data analysis service providers. To be able to provide data analysis services, these providers may receive order information.
- Marketing assistance providers. To be able to provide marketing assistance, these providers receive your biographical and contact information and order information.
- Payment service providers. To be able to provide payment services, these providers receive biographical and contact information and order information.
- Communications and voice technology service providers. To be able to provide AI ordering agent services and related call handling, voice interaction and transcription services, these providers receive call metadata, audio recordings, transcriptions and related interaction data, which may include biographical and contact information where provided during a call.
We may disclose personal data in some scenarios e.g. when you violate our terms and conditions or other policies. We may disclose such personal data, at our sole discretion, if we believe it necessary or appropriate in connection with investigation of fraud, IP infringement, piracy, or other unlawful activity. This may require disclosure of biographical and contact information and automatically collected data, amongst other personal data.
In some cases, we may buy or sell assets which may involve the transfer of customer information. We will transfer such information if we are acquired by or merged with another company.
Data Retention
We will keep personal data only for as long as the retention of such personal data is deemed necessary for the purposes for which that personal data are processed (as described in this Privacy Policy) unless we are required to retain your personal data for a longer period (e.g. in the event of legal proceedings or investigations).
Data Transfers Outside the EEA
Our online ordering partner, Flipdish, and other service providers engaged by Flipdish or by us may transfer personal data outside the European Economic Area (the "EEA") to countries that are not deemed to grant an adequate level of protection. Other service providers engaged by Flipdish or by us may also transfer personal data outside the EEA in accordance with applicable Data Protection Laws and appropriate safeguards. Any such transfers will be in accordance with applicable law and appropriate safeguards such as the standard contractual clauses approved under EU law from time to time. Any transfers of personal data from the EEA to the United Kingdom are conducted on the basis of the European Commission's adequacy decision in respect of the UK, available on the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). If you require further information or would like to access a copy of the applicable standard contractual clauses, please contact [email protected].
Necessity of Provision of Certain Personal Data
Certain information, such as biographical and contact details and order details have to be provided to enable us to provide food ordering services to you via the Services. If you do not provide this information, it will mean that we are not able to provide such services to you.
Third Party Links
On occasion we include links to third parties on the Services. Where we provide a link it does not mean that we have any control over the linked website or its privacy policy or that we endorse, or approve that website's policy towards visitor privacy. You should review the linked website's privacy policy before sending them any personal data.
Service-related Announcements
We may send you service-related announcements. You may not opt out of service-related communications where these are necessary for the operation of the Services.
Contacting Us
For further information about this Privacy Policy or the processing of your personal data by or on our behalf, please contact us by using the contact details provided on the Services. Where personal data is processed jointly with Flipdish, we and Flipdish may coordinate in responding to queries or requests.
While you may make a complaint in respect of our compliance with Data Protection Laws to any competent data protection supervisory authority, we ask that you contact us in the first instance to give us the opportunity to address your concerns.
Changes
The manner in which we process personal data will evolve and we will update this Privacy Policy from time to time to reflect changing practices. We will update the "Last Modified" date accordingly at the end of this Privacy Policy. Please review this Privacy Policy from time to time.
Last Modified
This Policy was last updated on 4 February 2026.