GNV Menu← Back to menu

Privacy Notice

This Privacy Notice explains how GNV (“we”, “us”, “our”) collects, processes, and protects information when you use the GNV Menu platform. We are committed to responsible data stewardship and transparent governance.

Data We Collect

When you use this service, we may collect:

  • Account information (name, email address, dietary preferences)
  • Meal selection preferences and favourites
  • Usage data (pages visited, features used, interaction timestamps)
  • Device and browser information for compatibility and security
  • Feedback and ratings you provide

Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Contract performance — processing necessary to provide the meal selection and menu display service
  • Legitimate interests — platform security, service improvement, and generation of anonymised operational intelligence
  • Legal obligations — compliance with food safety and allergen disclosure requirements
  • Consent — where required for optional features such as dietary profiling or communications

How We Use Your Data

Your data is used to:

  • Provide meal selection services and display relevant menu information
  • Personalise your experience based on dietary preferences and favourites
  • Improve the accuracy of nutrition, allergen, and menu information
  • Generate anonymised, aggregated insights to improve the platform
  • Maintain platform security and prevent misuse

We do not sell your personal data to third parties.

Data Categories and Retention

Personal data (account information and directly identifying data) is retained for the duration of your active use of the service. Upon account closure, personal data is securely deleted within 90 days unless a longer period is required by law.

Anonymised and aggregated data (such as meal popularity trends, nutrition analytics, and operational patterns) may be retained indefinitely as these do not identify you personally. This data contributes to the platform's network intelligence and is governed by the Platform Terms.

Third-Party Sharing

We do not sell personal data. We share personal data only with infrastructure providers (AWS) necessary to operate the platform, under strict data processing agreements. Anonymised usage data may be shared with your catering provider to improve menu offerings — no personally identifiable information is shared without your consent.

International Transfers

The service is primarily hosted on AWS infrastructure in the EU (Ireland). Where data is transferred outside the UK or EEA, appropriate safeguards are in place including Standard Contractual Clauses.

Your Rights

Under applicable data protection law, you have the right to:

  • Access a copy of the personal data we hold about you
  • Rectify inaccurate or incomplete personal data
  • Request erasure of your personal data
  • Restrict or object to certain processing
  • Receive your data in a portable format
  • Withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at the address below.

Contact

For privacy-related enquiries or data subject requests, contact us at privacy@app-gnv.com.

Last updated: May 2025