Privacy
Policy.

1. INTRODUCTION

At ZeepUp, we are committed to protecting your privacy and handling your personal information in a transparent, secure and lawful manner.

This Privacy Policy explains how ZeepUp UK Ltd ("ZeepUp", "we", "our" or "us") collects, uses, stores, shares and protects personal information when you use the ZeepUp mobile application (the "App"), create an account, purchase Products, book Experiences, register as a Vendor or otherwise interact with our services.

Please read this Privacy Policy carefully before using the App.

By accessing or using the App, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read together with our:

• Customer Terms and Conditions;
• Seller Terms and Conditions;
• any other policies made available through the App.

2. WHO WE ARE

ZeepUp UK Ltd is the operator of the ZeepUp App within the United Kingdom and is the data controller responsible for the processing of your personal information described in this Privacy Policy.

Our contact details are:

ZeepUp UK Ltd

Registered Office: [To be inserted]

Company Number: [To be inserted]

Email: privacy@zeepup.com

Website: www.zeepup.com

If we appoint a Data Protection Officer ("DPO") or UK Representative, their details will be published within the App and on our website.

3. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information processed when you:

• download or use the ZeepUp App;
• create a Customer Account;
• create a Vendor Account;
• browse Products or Experiences;
• make a Booking;
• purchase Products;
• communicate with Vendors;
• communicate with our Customer Support team;
• submit reviews;
• upload photographs or other content;
• participate in community or social features of the App;
• receive marketing communications;
• interact with ZeepUp through social media;
• otherwise use any services provided through the App.

This Privacy Policy applies to both:

• Customers; and
• Vendors.

Where additional privacy notices apply to specific services, they shall supplement this Privacy Policy.

4. DEFINITIONS

For the purposes of this Privacy Policy:

App means the ZeepUp mobile application.

Booking means any reservation, order or purchase completed through the App.

Customer means any person purchasing Products or booking Experiences.

Experience means any private dining experience, cooking class, tasting or similar activity offered through the App.

Home Kitchen means a Vendor preparing Products from a domestic kitchen.

Personal Information means any information relating to an identified or identifiable individual as defined by the UK General Data Protection Regulation.

Platform means the ZeepUp mobile application and related services.

Products means food, beverages and other products sold through the App.

Restaurant means any restaurant offering Products through the App.

Vendor means any Restaurant, Home Kitchen, chef or other business or individual offering Products or Experiences through the App.

5. OUR PRIVACY PRINCIPLES

ZeepUp processes personal information in accordance with the principles established by the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

Accordingly, we process personal information:

• lawfully, fairly and transparently;
• only for specified and legitimate purposes;
• only where necessary for those purposes;
• accurately and, where necessary, kept up to date;
• only for as long as necessary;
• securely using appropriate technical and organisational measures;
• in a manner that protects your rights and freedoms.

We regularly review our data processing practices to ensure continued compliance with applicable data protection legislation.

6. WHO THIS PRIVACY POLICY APPLIES TO

This Privacy Policy applies to:

Customers

Individuals who:

• browse the App;
• create a Customer Account;
• purchase Products;
• book Experiences;
• submit reviews;
• communicate with Vendors;
• contact Customer Support.

Vendors

Businesses and individuals who:

• register on the App;
• offer Products;
• offer Experiences;
• operate Restaurants;
• operate Home Kitchens;
• host Home Dining Experiences.

Visitors

Individuals who browse publicly available information within the App without creating an Account.

Customer Support Users

Individuals who contact ZeepUp through email, in-app messaging or other customer support channels.

7. APPLICABLE DATA PROTECTION LEGISLATION

ZeepUp processes personal information in accordance with:

• the UK General Data Protection Regulation (UK GDPR);
• the Data Protection Act 2018;
• the Privacy and Electronic Communications Regulations (PECR), where applicable;
• any other applicable data protection legislation in force from time to time.

Where personal information is processed outside the United Kingdom, ZeepUp implements appropriate safeguards as described later in this Privacy Policy.

8. HOW TO READ THIS PRIVACY POLICY

This Privacy Policy explains:

• what information we collect;
• how we collect it;
• why we collect it;
• how long we keep it;
• who we share it with;
• your rights;
• how you can contact us.

We encourage you to review this Privacy Policy regularly, as it may be updated from time to time to reflect changes to our services or legal obligations.

Summary of Data We Process

9. INFORMATION WE COLLECT

The personal information we collect depends on how you interact with the App and whether you use the App as a Customer, Vendor or visitor.

We collect personal information:

• directly from you when you create an Account or use the App;
• automatically when you use the App;
• from our payment provider (Stripe Connect);
• from trusted third-party service providers where permitted by applicable law.

The categories of information we collect are described below.

10. INFORMATION YOU PROVIDE AS A CUSTOMER

When you create a Customer Account or use the App, we may collect the following categories of personal information.

Account Information

• first name;
• last name;
• email address;
• mobile telephone number;
• encrypted password;
• profile photograph (if uploaded);
• preferred language;
• profile preferences.

Booking Information

• Restaurant bookings;
• Home Kitchen orders;
• Home Dining Experience bookings;
• booking history;
• order history;
• saved addresses;
• favourite Vendors;
• favourite Products;
• favourite Experiences;
• cancellation history.

Communications

Where you communicate with ZeepUp or Vendors through the App, we may collect:

• customer support requests;
• emails;
• messages;
• attachments;
• complaint information;
• feedback;
• survey responses.

Community Activity

Where you participate in community features of the App, we may collect:

• reviews;
• ratings;
• comments;
• posts;
• photographs;
• videos;
• reactions;
• saved content;
• profile activity;
• other User-Generated Content voluntarily submitted by you.

11. INFORMATION YOU PROVIDE AS A VENDOR

If you register as a Vendor, we collect the information necessary to onboard your business, manage your Account, process payments and enable you to offer Products and Experiences through the Platform.

Depending on your activities, this information may include:

Business Information

• legal name;
• trading name;
• business name;
• registered address;
• trading address;
• email address;
• telephone number;
• VAT number (where applicable);
• company registration number (where applicable);
• tax information;
• food business registration details;
• licences and permits;
• insurance information (where voluntarily provided or required by law).

Business Listings

Information relating to Products and Experiences, including:

• menus;
• recipes;
• Product descriptions;
• Experience descriptions;
• photographs;
• videos;
• prices;
• opening hours;
• availability calendars;
• collection instructions;
• promotional materials;
• business profile information.

Identity Verification

Where necessary for onboarding, fraud prevention or compliance purposes, ZeepUp may request:

• proof of identity;
• proof of address;
• business documentation;
• regulatory registrations;
• other supporting documentation reasonably required.

Any documentation requested by ZeepUp is collected solely for operational, legal, compliance or fraud prevention purposes and does not constitute approval or certification of the Vendor.

12. PUBLIC PROFILE INFORMATION

Certain information published by Customers and Vendors is intended to be visible to other users of the App in order to enable the operation of the Marketplace and its community features.

Depending on your role and your use of the App, publicly visible information may include:

Vendor Profiles

• business name;
• Vendor name;
• profile photograph;
• business photographs;
• Product photographs;
• Experience photographs;
• menus;
• Product descriptions;
• Experience descriptions;
• ratings;
• reviews;
• business location;
• address of collection points or Experience venues (where applicable);
• opening hours;
• availability information;
• publicly shared posts and other Social Content.

Customer Profiles

Where community features are enabled, other users may be able to view information that you choose to make public, including:

• first name;
• profile photograph;
• reviews;
• ratings;
• publicly shared posts;
• comments;
• photographs;
• videos;
• other User-Generated Content.

The visibility of certain information may depend upon your privacy settings and the functionality of the App.

Please note that where you choose to make information publicly available through the App, such information may be viewed, copied, saved, shared or otherwise used by other users outside the App. ZeepUp cannot control how other users may use information that you choose to publish publicly.

You should not publish any personal, confidential or sensitive information that you do not wish to be visible to other users.

13. SOCIAL FEATURES AND USER-GENERATED CONTENT

The App includes social, community and interactive features that enable Customers and Vendors to create, upload, publish, share and interact with content ("User-Generated Content").

User-Generated Content may include:

• photographs;
• videos;
• recipes;
• menus;
• posts;
• stories;
• comments;
• reviews;
• ratings;
• captions;
• profile information;
• likes;
• reactions;
• saved content;
• business updates;
• promotional content;
• any other content voluntarily published through the App.

We process User-Generated Content in order to:

• operate community features;
• display content to other users;
• enable interactions between Customers and Vendors;
• improve the user experience;
• moderate content;
• prevent fraud, spam and abuse;
• investigate breaches of our Terms and Community Standards;
• improve our services;
• promote the Platform and its community where permitted by applicable law.

Where you voluntarily publish User-Generated Content through the App, you acknowledge that such content may be viewed, shared, commented upon or interacted with by other users in accordance with the functionality of the Platform.

We recommend that you do not publish confidential or sensitive personal information through community features.

The use of User-Generated Content by ZeepUp for commercial, editorial and marketing purposes is governed by the applicable Customer Terms and Conditions and Seller Terms and Conditions.

14. SPECIAL CATEGORY PERSONAL INFORMATION

ZeepUp does not intentionally request special category personal information unless it is necessary for the provision of our services or required by law.

However, Customers or Vendors may voluntarily provide information relating to:

• food allergies;
• dietary requirements;
• accessibility requirements;
• health-related requests;
• other information that may constitute special category personal information.

Such information is processed only where necessary to:

• respond to your request;
• facilitate a Booking;
• communicate relevant information to the Vendor;
• comply with legal obligations.

We ask that you do not provide unnecessary health or sensitive personal information through the App.

15. INFORMATION WE RECEIVE FROM THIRD PARTIES

We may receive personal information from trusted third parties including:

• Stripe Connect;
• payment service providers;
• identity verification providers;
• fraud prevention providers;
• analytics providers;
• social media platforms where you interact with ZeepUp;
• public authorities where required by law.

We process such information only where permitted by applicable law and only for the purposes described in this Privacy Policy.

16. INFORMATION COLLECTED AUTOMATICALLY

When you use the App, certain information is collected automatically to enable the operation, security, performance and improvement of our services.

This information may include:

• device model;
• operating system;
• device language;
• App version;
• device identifiers;
• IP address;
• approximate location;
• date and time of access;
• session information;
• pages viewed;
• features used;
• interactions within the App;
• error logs;
• diagnostic information.

We use this information to:

• operate the App;
• improve performance;
• identify technical issues;
• detect fraud;
• improve security;
• understand how users interact with the App;
• improve user experience.

17. DEVICE INFORMATION

When you use the App, we may collect information relating to the device you use to access our services.

This may include:

• device type;
• manufacturer;
• operating system;
• operating system version;
• App version;
• language settings;
• time zone;
• unique device identifiers;
• mobile network information;
• diagnostic identifiers.

This information is used to:

• provide the App;
• ensure compatibility;
• improve stability;
• resolve technical issues;
• maintain security;
• analyse App performance.

18. LOCATION INFORMATION

The App uses location information to enable location-based features and improve the services provided to Customers and Vendors.

Depending on your device settings and permissions, we may process:

• precise location;
• approximate location;
• location selected manually by you;
• saved addresses;
• collection locations;
• Experience locations.

Location information may be used to:

• display nearby Restaurants;
• display nearby Home Kitchens;
• display nearby Experiences;
• improve search results;
• calculate approximate distances;
• facilitate Bookings;
• improve the operation of the Platform;
• detect suspicious activity.

Location Services can be enabled or disabled through your device settings at any time.

Please note that disabling Location Services may affect certain functionality of the App.

ZeepUp does not continuously track your location in the background unless you expressly grant permission and such functionality is introduced in future versions of the App.

App Permissions

The App may request access to certain device permissions in order to provide specific features.

Depending on your device settings and how you use the App, these permissions may include:

• location, to show nearby Restaurants, Home Kitchens and Experiences;
• camera, where you choose to take or upload photographs;
• photo library, where you choose to upload images or videos;
• push notifications, to send booking updates, reminders and account alerts.

You can manage or disable App permissions at any time through your device settings. Disabling certain permissions may affect the functionality of the App.

19. PUSH NOTIFICATIONS

Where you enable push notifications, ZeepUp may send notifications relating to:

• Booking confirmations;
• Booking reminders;
• collection reminders;
• Experience reminders;
• payment confirmations;
• refunds;
• Customer Support;
• security alerts;
• updates relating to your Account;
• promotional offers (where you have consented to receive marketing communications).

You may disable push notifications at any time through your device settings.

Disabling notifications may prevent you from receiving important service-related communications.

20. IN-APP ANALYTICS

To understand how the App is used and to improve our services, ZeepUp collects analytics information relating to user interactions within the App.

Analytics information may include:

• screens viewed;
• navigation paths;
• features used;
• clicks and taps;
• searches performed;
• time spent within different areas of the App;
• completed Bookings;
• abandoned Bookings;
• errors encountered;
• performance metrics.

We use analytics information to:

• improve App usability;
• improve Products and services;
• understand user behaviour;
• identify popular features;
• improve search functionality;
• optimise user journeys;
• improve platform performance;
• detect technical issues.

Analytics information is used primarily in aggregated or pseudonymised form wherever reasonably possible.

21. PAYMENTS

Payments made through the App are processed by Stripe Connect, our third-party payment service provider.

ZeepUp does not collect or store your complete payment card details.

Depending on whether you are a Customer or a Vendor, Stripe may collect and process information including:

• payment card information;
• bank account information;
• billing address;
• payment verification information;
• payout information;
• tax information;
• identity verification information;
• transaction history.

ZeepUp may receive limited information from Stripe necessary to:

• confirm successful payments;
• process refunds;
• facilitate Vendor payouts;
• prevent fraud;
• investigate payment disputes;
• comply with legal obligations.

All payment information processed by Stripe is subject to Stripe's own Privacy Policy and Terms of Service.

We encourage you to review Stripe's Privacy Policy before using payment services through the App.

22. HOW WE USE YOUR PERSONAL INFORMATION

We use personal information only where necessary for legitimate business purposes and in accordance with applicable law.

Depending on how you use the App, we may use your personal information to:

• create and manage your Account;
• verify your identity where necessary;
• onboard Vendors;
• facilitate Bookings;
• process payments;
• arrange Vendor payouts;
• communicate with Customers and Vendors;
• provide Customer Support;
• display Restaurants, Home Kitchens and Experiences;
• personalise search results;
• provide location-based services;
• publish reviews and ratings;
• operate community features;
• moderate User-Generated Content;
• improve the App;
• develop new products and features;
• analyse usage of the App;
• detect and prevent fraud;
• investigate abuse of the Platform;
• protect the security of the Platform;
• comply with legal obligations;
• enforce our Customer Terms and Seller Terms;
• protect the rights, property and safety of ZeepUp, our users and third parties.

We do not sell your personal information to third parties.

We process personal information only for the purposes described in this Privacy Policy or otherwise permitted by applicable law.

23. LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION

Under the UK General Data Protection Regulation (UK GDPR), we process personal information only where we have a lawful basis for doing so.

Depending on the circumstances, we rely on one or more of the following legal bases:

Performance of a Contract

We process personal information where it is necessary to:

• create and manage your Account;
• process Bookings;
• facilitate payments;
• arrange Vendor payouts;
• provide Customer Support;
• communicate regarding Products and Experiences;
• perform our contractual obligations.

Legitimate Interests

We process personal information where it is necessary for our legitimate business interests, provided that such interests are not overridden by your rights and freedoms.

These legitimate interests include:

• operating and improving the App;
• maintaining Platform security;
• fraud prevention;
• trust and safety;
• identity verification;
• customer support;
• business analytics;
• App performance monitoring;
• community moderation;
• review moderation;
• dispute resolution;
• enforcing our Terms and Conditions;
• protecting ZeepUp, Customers and Vendors from unlawful or abusive conduct;
• improving Products, Experiences and Platform functionality.

Compliance with Legal Obligations

We process personal information where necessary to comply with legal obligations, including:

• tax obligations;
• accounting obligations;
• anti-fraud requirements;
• law enforcement requests;
• regulatory investigations;
• court orders;
• consumer protection legislation.

Consent

Where required by law, we rely on your consent for specific processing activities, including:

• sending marketing communications;
• certain push notifications;
• access to Location Services;
• any other processing where consent is required.

You may withdraw your consent at any time where processing is based on consent.

Withdrawal of consent shall not affect the lawfulness of processing carried out before consent was withdrawn.

24. HOW WE SHARE YOUR INFORMATION

We share personal information only where necessary to operate the Platform or where required by law.

Depending on your use of the App, we may share personal information with:

Vendors

Where you make a Booking, we share information reasonably necessary for the Vendor to fulfil your Booking, including:

• name;
• contact information;
• Booking details;
• collection details;
• information voluntarily provided by you relating to the Booking.

Customers

Where you operate as a Vendor, certain information relating to your business may be visible to Customers, including:

• business name;
• profile information;
• photographs;
• menus;
• Product listings;
• Experience listings;
• ratings;
• reviews;
• publicly available business information.

Payment Providers

Payments and payouts are processed through Stripe Connect and other payment service providers engaged by ZeepUp.

Service Providers

We may share personal information with carefully selected service providers assisting us with:

• cloud hosting;
• infrastructure;
• data storage;
• analytics;
• customer support;
• fraud prevention;
• communications;
• email delivery;
• push notifications;
• software development;
• security monitoring.

All service providers are required to protect personal information and process it only on our documented instructions where applicable.

Business Transfers If ZeepUp is involved in a merger, acquisition, investment, restructuring, sale of assets or similar corporate transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate safeguards.

Legal and Regulatory Authorities

We may disclose personal information where required to:

• comply with applicable law;
• comply with court orders;
• respond to lawful requests from public authorities;
• protect our legal rights;
• investigate fraud or unlawful activity;
• protect the safety of our users.

We do not sell your personal information to third parties.

25. INTERNATIONAL TRANSFERS

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, ZeepUp will ensure that appropriate safeguards are implemented in accordance with UK data protection legislation.

Such safeguards may include:

• UK International Data Transfer Agreements (IDTA);
• UK Addendum to the European Commission Standard Contractual Clauses;
• adequacy regulations adopted by the UK Government;
• other lawful transfer mechanisms recognised under applicable law.

We take reasonable steps to ensure that your personal information receives an adequate level of protection wherever it is processed.

26. DATA RETENTION

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with legal obligations.

Retention periods vary depending on the nature of the information.

By way of example:

Account Information

Retained while your Account remains active and for an appropriate period thereafter where required for legal, regulatory or fraud prevention purposes.

Booking Information

Retained for the period necessary to manage Bookings, resolve disputes, comply with legal obligations and maintain business records.

Payment Information

Payment information retained by ZeepUp is limited.

Financial information processed by Stripe is retained in accordance with Stripe's legal obligations and privacy practices.

Customer Support Communications

Retained for as long as necessary to manage enquiries, complaints, investigations and legal obligations.

Reviews and Ratings

Reviews, ratings and other publicly available User-Generated Content may remain visible after completion of a Booking in order to maintain the integrity of the Platform's reputation system, unless removed in accordance with applicable law or our policies.

Vendor Information

Vendor information may be retained following closure of a Vendor Account where necessary to:

• comply with legal obligations;
• maintain accounting records;
• resolve disputes;
• prevent fraud;
• enforce our Terms.

Where personal information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with applicable law.

If you delete your Account, we will delete or anonymise personal information where legally possible. However, we may retain certain information where necessary to comply with legal obligations, resolve disputes, prevent fraud, enforce our Terms, maintain accounting records or preserve the integrity of reviews, bookings and transaction history.

27. SECURITY

ZeepUp takes the security of personal information seriously.

We implement appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• destruction;
• alteration;
• disclosure;
• misuse.

Such measures may include:

• encrypted communications;
• secure authentication;
• access controls;
• monitoring systems;
• fraud detection;
• regular security reviews;
• staff training;
• secure cloud infrastructure.

These measures may include encryption in transit and, where appropriate, encryption at rest, access logging, role-based access controls, incident response procedures and additional authentication measures.

While we take reasonable steps to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality of their login credentials and should notify ZeepUp immediately if they suspect unauthorised access to their Account.

28. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

ZeepUp may use automated technologies, algorithms and artificial intelligence ("AI") systems to support the operation, security and improvement of the App.

Such technologies may be used for purposes including, without limitation:

• detecting fraudulent or suspicious activity;
• identifying abusive behaviour;
• preventing spam;
• moderating reviews and User-Generated Content;
• improving search functionality;
• recommending Products, Restaurants, Home Kitchens and Experiences;
• personalising content displayed within the App;
• improving customer support;
• analysing App performance;
• identifying technical issues;
• improving Platform security;
• improving user experience;
• generating business insights based on aggregated or anonymised data.

Where automated systems are used, ZeepUp remains responsible for ensuring that such processing complies with applicable data protection legislation.

ZeepUp does not use solely automated decision-making that produces legal or similarly significant effects on individuals unless permitted by applicable law.

Where required by law, you will be informed if a significant decision is made solely through automated processing and you will have the rights provided by applicable law.

ZeepUp does not use personal information to train AI models in a manner intended to identify individual users unless permitted by applicable law and, where required, appropriate notice or consent has been provided.

29. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have the following rights in relation to your personal information.

You may have the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information where applicable;
• request restriction of processing;
• object to certain processing activities;
• request the transfer of your personal information to another service provider where technically feasible;
• withdraw consent where processing is based on consent;
• object to direct marketing communications;
• lodge a complaint with the Information Commissioner's Office (ICO).

These rights are not absolute and may be subject to legal limitations.

To exercise any of your rights, please contact us using the contact details provided at the end of this Privacy Policy.

We may request reasonable evidence of identity before responding to your request.

We will respond within the timeframes required by applicable law.

30. MARKETING COMMUNICATIONS

Where permitted by applicable law, ZeepUp may send:

• newsletters;
• promotional offers;
• product updates;
• new feature announcements;
• event invitations;
• recommendations;
• surveys;
• other marketing communications.

Where consent is required, we will obtain your consent before sending such communications.

You may unsubscribe from marketing communications at any time by:

• using the unsubscribe link contained in our emails;
• changing your notification preferences within the App;
• contacting Customer Support.

Please note that even if you opt out of marketing communications, we may continue to send service-related communications necessary for the operation of your Account or Bookings.

ZeepUp may also use anonymised or aggregated information for analytics, reporting, product development, business planning, investor communications and service improvement. Such information does not identify individual users.

31. CHILDREN'S PRIVACY

The App is not intended for children under the age of 18.

ZeepUp does not knowingly collect personal information from children.

If we become aware that personal information relating to a child has been collected without appropriate legal basis, we will take reasonable steps to delete such information as soon as reasonably practicable.

If you believe that a child has provided personal information to ZeepUp, please contact us immediately.

32. CHANGES TO THIS PRIVACY POLICY

ZeepUp may update this Privacy Policy from time to time to reflect:

• changes in applicable law;
• regulatory guidance;
• changes to our services;
• new App functionality;
• changes to our business operations;
• security improvements.

Where changes are material, we will provide reasonable notice through the App, by email or by other appropriate means before the updated Privacy Policy becomes effective.

The latest version of this Privacy Policy will always be available within the App.

Your continued use of the App after the effective date of an updated Privacy Policy constitutes acknowledgement of the revised Privacy Policy.

33. CONTACT US

If you have any questions about this Privacy Policy or about how ZeepUp processes your personal information, please contact us.

Privacy Team

ZeepUp UK Ltd

Email: privacy@zeepup.com

Website: www.zeepup.com

If you are dissatisfied with our response to a privacy-related concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Information about the ICO is available at:

https://ico.org.uk

Last Updated: September 2026