Privacy Policy

The Data Controller is Sodexo Limited ("We") of One Southampton Row, London WC1B 5HA. We are committed to protecting and respecting your privacy.

Sodexo Limited is part of an international group of companies.  Our parent Company Sodexo SA was founded in 1966 in France and is now the worldwide leader in quality of life services. We provide on-site services, benefits and rewards services and personal and home services to many clients to improve quality of life.  We don’t routinely share Personal Data between our group companies, and we’ve set out more details about when we do in the section titled “Disclosure of your Information”.

You can find out more about us by visiting our website uk.sodexo.com/home and searching under the other locations tab.

The email for our local Data Protection contact is DataProtection.UKandIE@sodexo.com

and our Group Data Protection Officer contact is dpo.group@sodexo.com.

This policy together with our terms of use sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

We’ve set out below the data we may collect from you and how and why we use it.

Obtained from	Personal Data	Purpose and legal ground
Information that you provide by filling in forms, surveys on our Bite mobile app (our site) or if you contact us.	Work contact details, transactions ( ie food orders) and other services, or if you report a problem with the site/app.  Responses to surveys.	To provide you with information, products or services that you request from us and any changes to our service- the contractual requirements. Legitimate interests – to improve and run our business, improve our customer service/offering , marketing and security.
.Metadata	details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data and information about the device used, cookies ( or the equivalent) and preferences	To allow you to participate in interactive features of our service, when you choose to do so.  To provide information which we feel may interest you, where you have consented to be contacted for such purposes. To ensure that content from our site is presented in the most effective manner for you and for your device.  Legitimate interests – to improve and run our business, improve our customer service/offering and security.

IP addresses and cookies

We may collect information about your device, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.

Cookies contain information that is transferred to your device hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable to estimate our audience size and usage pattern.  , store information about your preferences, and so allow us to customise our site according to your individual interests.  , speed up your searches and recognise you when you return to our site.

You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.

Where We store your personal data

The data that We collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where We have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although We will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once We have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Disclosure of your information

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1162 of the UK Companies Act 2006.  This information is not routinely shared. It may be shared for the provision of joint services, for example IT support. It may also be shared for statistical analysis. Where appropriate a data sharing agreement is put in place.

We may disclose your personal information to third parties:

• If We sell or buy any business or assets, in which case We may disclose your personal data to the prospective seller or buyer of such business or assets. 
• If We are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Sodexo Limited and/or its subsidiary and associated companies, our customers, or others or to assist with regulatory or criminal investigations. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction. 

Your rights

Sodexo is committed to ensure protection of your rights under applicable laws. You will find below a table summarizing your different rights:

Right of access	You can request access to your personal data. You may also request rectification of inaccurate personal data, or to have incomplete personal data completed. You can request any available information as to the source of the personal data and you may also request a copy of your personal data being processed by Sodexo.
Right to be forgotten	Your right to be forgotten entitles you to request the erasure of your personal data in cases where: (i) the data is no longer necessary; (ii) you choose to withdraw your consent; (iii) you object to the processing of your personal data by automated means using technical specifications; (iv) your personal data has been unlawfully processed; (v) there is a legal obligation to erase your personal data; (vi) erasure is required to ensure compliance with applicable laws.
Right to restriction of processing	You may request that processing of your personal data be restricted in the cases where: (i) you contest the accuracy of the personal data; (ii) Sodexo no longer needs the personal data, for the purposes of the processing; (iii) you have objected to processing for legitimate reasons.
Right to data portability	You can request, where applicable, the portability of your personal data that you have provided to Sodexo, in a structured, commonly used, and machine-readable format and you have the right to transmit this data to another Controller without hindrance from Sodexo where: (a)          the processing of your personal data is based on consent or on a contract; and (b)          the processing is carried out by automated means. You can also request that your personal data be transmitted to a third party of your choice (where technically feasible).
Right to object to processing for the purposes of direct marketing	You can object to us using your Personal Data for direct marketing.  You can also contact us to object to how we are using your Personal Data for any other reason but we may not have to stop using it for this purpose.
Right to Withdraw Consent	If We process your personal data on the basis of your consent, you can withdraw your consent at any time.
Right not to be subject to automated decisions	You have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal affect upon you or significantly affects you.
Right to make a complaint	You can choose to lodge a Complaint with the Data Protection Supervisory Authority in the country of your habitual residence, place of work or place of the alleged infringement, regardless of whether you have suffered damages.  In the UK this is the Information Commissioner, www.ICO.org.uk You have also the right to lodge your Complaint before the courts where the Sodexo entity has an establishment or where you have your habitual residence.

To exercise your rights , contact dataprotection.ukandie@sodexo.com or the Group Data Protection Office at dpo.group@sodexo.com.

If you wish to unsubscribe to marketing emails communications, you can also do so by using the unsubscribe function on the email. contacting UKandIE.Promotions@sodexo.com

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.