Allergy Advisor ("we", "us") respects the privacy of our brand partners, prospective partners, and partner representatives. This Partner Privacy Policy explains how we collect and use business contact information and partner account data when you use the Allergy Advisor Brand Portal or discuss a commercial partnership with us.
This policy applies to partner and business use. Our separate consumer Privacy Policy applies to app users and diners.
1. Who we are
Controller: George Oakey (trading as "Allergy Advisor") (UK). Contact: info@allergyadvisor.app.
2. Information we collect from partners
- Account details: company name, work email address, password authentication records, email verification status, account timestamps, and terms acceptance records.
- Business contact details: contact names, job roles, business email addresses, phone numbers, website links, social links, and correspondence you send us.
- Reward deal submissions: brand name, logo, offer title, offer description, required member tier, country, expiry, terms, claim URL, discount code, approval status, and review notes.
- Portal and security data: login events, device/browser data, IP address, basic analytics, upload metadata, and records needed to secure and operate the partner portal.
- Future commercial data: if paid placements, invoicing, or partner packages are introduced, we may collect billing, payment, contract, and campaign performance information.
Company-level information is not always personal data, but business contact details relating to identifiable people are personal data and are handled under this policy.
3. How we use partner data
- Create, verify, secure, and manage partner portal accounts.
- Review, approve, reject, pause, update, or remove reward deal submissions.
- Display approved deal content, brand logos, offer information, and safety wording in the Allergy Advisor app or website.
- Contact you about your account, submitted deals, approvals, rejected submissions, expired offers, support requests, and operational updates.
- Send relevant partner, product, commercial, or collaboration updates where lawful. You can opt out of non-essential marketing emails.
- Protect Allergy Advisor, users, partners, and the public from misleading claims, unsafe content, misuse, fraud, or legal risk.
- Measure partner interest, deal performance, and portal usage. We may share aggregated or anonymised partner and campaign metrics.
- Comply with legal, tax, accounting, dispute, audit, and regulatory obligations.
4. Legal bases
- Contract or steps before contract: creating a partner account, accepting partner terms, reviewing submissions, and managing partner relationships.
- Legitimate interests: operating the portal, contacting business representatives, improving partner features, preventing abuse, keeping records, and protecting legal rights.
- Consent: where we specifically ask for consent, such as optional marketing preferences or future optional features.
- Legal obligation: where records are needed for compliance, tax, accounting, disputes, or lawful requests.
5. Business communications
We may contact partner representatives using business contact details for account, service, operational, approval, safety, and commercial reasons connected with Allergy Advisor. Some emails are necessary for the partner service, such as email verification, password reset, deal status, compliance, and security notices.
Where we send non-essential partner marketing or commercial updates, we will do so only where lawful and will provide a way to opt out. Opting out of marketing does not stop necessary account, security, legal, or deal-administration messages.
6. What becomes visible to users
Approved reward deals may be shown to Allergy Advisor users. This may include the brand name, logo, deal title, description, discount code, website, claim URL, expiry, country, terms, and the safety disclaimer shown with offers. Do not submit private, confidential, or sensitive information in fields intended to be displayed publicly.
7. Sharing and processors
We do not sell partner personal data. We use trusted providers to operate the service, including Google Firebase/Firestore/Auth/Hosting/Storage/Cloud Functions for authentication, hosting, database, storage, and backend functions; email and messaging providers; analytics and security tools; professional advisers; and app/website infrastructure providers.
We may share partner data where required by law, to protect rights or safety, with professional advisers, or as part of a business transfer, merger, acquisition, or restructuring.
8. Allergy, medical, and product safety context
Important: Allergy Advisor does not verify, certify, medically endorse, or guarantee any partner product, restaurant, offer, ingredient statement, allergen statement, gluten-free statement, coeliac-related claim, cross-contamination statement, or food safety claim. Partners are responsible for the accuracy, legality, and safety of the information and offers they submit.
We may keep records of partner submissions, edits, approvals, pauses, rejection notes, and communications where needed to protect users, investigate complaints, respond to legal claims, or demonstrate what information was supplied by a partner.
9. International transfers
Our providers may process data in the UK, EU, US, or other locations. Where required, we rely on appropriate safeguards such as contracts, transfer mechanisms, and provider security commitments.
10. Retention
We keep partner account and deal records while your account is active and for as long as reasonably needed for legal, safety, audit, dispute, and operational purposes. Approved deal content may remain in backups or records after a deal is paused, rejected, expired, or deleted from live display.
11. Your rights
Business representatives may request access, correction, deletion, restriction, objection, and portability where applicable. Contact info@allergyadvisor.app. Some data may need to be retained for legal, safety, audit, fraud prevention, or dispute reasons.
12. Security
We use technical and organisational measures to protect partner data, including authenticated access, email verification, database rules, storage rules, and access controls. No online service is completely secure, so partners must protect their login credentials and tell us promptly if they suspect unauthorised access.
13. Changes
We may update this policy as the partner portal, rewards programme, brand approval workflow, and commercial model develop. Material changes may be notified by email, portal notice, or updated website notice.
14. Contact
Questions about this Partner Privacy Policy? Contact info@allergyadvisor.app.