Privacy Policy

1. Who we are

ServeSocial (“Serve Social”, “we”, “us” or “our”) provides social media marketing services for restaurants and hospitality businesses. For the personal information described in this policy, ServeSocial is the data controller.

Questions or privacy requests can be sent to hello@servesocial.co.

2. Information we collect

Depending on how you contact or work with us, we may collect:

• your name, email address and phone number;
• your restaurant or business name, city, website and social media usernames;
• answers submitted through our website forms or Meta lead forms;
• messages, enquiries, call notes and other communications with us;
• service, proposal, contract, invoice and payment records if you become a client; and
• basic technical information generated when you visit our website, such as IP address, browser type, device information, referring page and server logs.

Please do not send sensitive personal information through our enquiry or audit forms.

3. How we collect it

We collect information directly from you when you complete a form, request a free audit, email us, contact us through social media, book a call or become a client. We may also receive lead information through Meta platforms, including Facebook and Instagram, when you submit one of our lead forms.

Our website is hosted by Netlify. It may process form submissions and standard technical logs needed to deliver and secure the site. The site also loads fonts from Google, which may receive technical request information such as your IP address and browser details.

4. Why we use your information

We use personal information to:

• respond to enquiries and prepare a free social media audit you requested;
• confirm whether our service is suitable for your restaurant or business;
• arrange calls, provide proposals and deliver contracted services;
• manage client relationships, invoices, records and support;
• improve our website, forms, advertising and services;
• protect our website and business from spam, fraud and misuse; and
• comply with legal, tax, accounting and regulatory obligations.

5. Our legal bases

Where UK data protection law applies, we rely on one or more of these legal bases:

• Steps before a contract or performance of a contract: to respond to a service request, prepare an audit or provide agreed services.
• Legitimate interests: to operate and improve our business, follow up relevant enquiries, protect our systems and keep appropriate business records, where those interests are not overridden by your rights.
• Legal obligation: where we must retain or disclose information to comply with law.
• Consent: where we ask for it, including for any marketing that requires consent. You may withdraw consent at any time.

6. Marketing communications

If you request an audit or enquire about our services, we may contact you about that request and closely related ServeSocial services. You can ask us to stop marketing at any time by replying “unsubscribe” or emailing hello@servesocial.co. Service-related messages may still be sent when necessary to fulfil a request or contract.

7. Who we share information with

We may share information only where necessary with trusted providers that help us operate, such as:

• Meta Platforms when you interact with our Facebook or Instagram advertising and lead forms;
• Netlify for website hosting, security and form processing;
• email, calendar, cloud-storage, customer-management, analytics and professional-service providers; and
• government bodies, regulators, courts, insurers or advisers where disclosure is required or reasonably necessary.

These providers may process information under their own privacy terms or on our instructions. We do not sell your personal information and do not exchange it for money.

8. International transfers

ServeSocial operates from the United Kingdom and serves businesses in the United States. Some of our service providers may process information in the UK, United States or other countries. Where required, we use recognised safeguards for international transfers, such as adequacy regulations or approved contractual protections.

9. How long we keep information

We keep information only for as long as reasonably needed for the purpose collected:

• enquiry and free-audit records are normally kept for up to 12 months after our last meaningful contact;
• marketing contact details are kept until you opt out or after a reasonable period of inactivity;
• client, contract, invoice and transaction records may be kept for up to 6 years after the relationship ends where needed for tax, accounting or legal purposes; and
• technical logs are retained according to our providers’ operational and security schedules.

We may keep information longer where law requires it or where it is needed to establish, exercise or defend legal claims.

10. How we protect information

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or disclosure. No internet transmission or storage system is completely secure, so we cannot promise absolute security.

11. Your privacy rights

Depending on where you live and which law applies, you may have rights to request access to, correction of, deletion of, restriction of or a copy of your personal information, and to object to certain uses. You may also withdraw consent where processing is based on consent.

To exercise a right, email hello@servesocial.co. We may ask for information needed to verify your identity. We will not discriminate against you for making a valid privacy request.

If UK data protection law applies, you can also complain to the UK Information Commissioner’s Office at ico.org.uk.

12. Information for California residents

California privacy rights vary depending on whether a business meets the legal thresholds for the California Consumer Privacy Act. Regardless, California residents may contact us to ask what information we hold about them, request correction or deletion, or ask questions about our practices. ServeSocial does not sell personal information and does not knowingly use or disclose sensitive personal information for purposes that require a right to limit under California law.

13. Children

Our website and services are intended for business owners and decision-makers, not children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided information to us, contact us so we can delete it.

14. Third-party sites and social platforms

Our website or communications may link to third-party websites and social platforms. Their handling of personal information is governed by their own privacy policies, which we do not control.

15. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version will be posted on this page with a revised “Last updated” date.