Privacy Policy

Last updated: 27 May 2026

1. Who We Are

MyAllergen ("we", "us", "our") is a UK-based digital platform operated by Ilaha Mammadova, Oxford, UK. We provide allergen information services for restaurants and consumers.

If you have any questions about this policy, contact us at: ilaha@myallergen.co.uk

2. Information We Collect

We collect the following types of information:

• Restaurant registration data: Name, email address, phone number, restaurant name and address when you sign up
• Menu and allergen data: Information you provide about dishes, ingredients and allergens
• Usage data: Pages visited, time spent, browser type and device information collected via analytics tools
• Communications: Any messages you send us via contact forms or email

3. How We Use Your Information

We use your information to:

• Create and manage your restaurant account on MyAllergen
• Display allergen menu information to your customers
• Generate and manage your QR code
• Communicate with you about your account and our services
• Improve our platform and user experience
• Comply with UK legal requirements including Natasha's Law

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract: To provide the services you have signed up for
• Legitimate interests: To improve our platform and communicate relevant updates
• Legal obligation: To comply with applicable UK laws and regulations

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Supabase: Our database provider (EU-based servers) — used to store restaurant and menu data
• Google Analytics: For website usage statistics (anonymised)
• Legal authorities: If required by law

Allergen and menu information you add is made publicly visible on your restaurant's menu page so customers can view it when scanning your QR code.

6. Data Retention

We retain your personal data for as long as your account is active. If you request deletion, we will remove your data within 30 days. Menu and allergen data is retained for the duration of your account.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability — receive your data in a portable format
• Lodge a complaint with the ICO (Information Commissioner's Office) at ico.org.uk

To exercise any of these rights, contact us at ilaha@myallergen.co.uk

8. Cookies

We use essential cookies to operate the platform and analytics cookies (Google Analytics) to understand how visitors use our site. You can disable cookies in your browser settings at any time.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted database connections, row-level security in our database, and HTTPS across all pages.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The "last updated" date at the top of this page will always reflect the most recent version.

11. Contact Us

For any privacy-related questions or requests:

• Email: ilaha@myallergen.co.uk
• Phone: +44 7438 155987
• Location: Oxford, UK