Who we are
wtewte ("we", "us", "our") is a food advisory service based in the United Kingdom. We operate the website at wtewte.com. You can contact us at [email protected].
What data we collect
Registered users: When you create an account, we collect your name, email address, and a hashed version of your password. When you submit a food advisory request, we collect the details you provide: city, cuisine preferences, dietary restrictions, group size, occasion, budget, and any additional notes. If you submit a follow-up question after receiving a recommendation, we store that message. If you rate a recommendation, we store your rating. If you were referred by another user or refer others, we store that relationship via a referral code.
Guests: If you submit a request without creating an account, we collect your name, email address, and the request details you provide. We generate a unique token to let you track your request and view your recommendation.
Providing your name and email address is a contractual requirement to use the service — without this information we cannot deliver your recommendation. All other fields are optional.
We do not collect payment information. We do not collect your precise location. We do not track you across other websites.
Lawful basis for processing
We process your personal data on the basis of contract performance — processing is necessary to provide the food advisory service you have requested. Where we send you service emails (such as verification or password reset), this is also on the basis of contract performance. We do not process your data on the basis of consent or legitimate interest for marketing purposes.
How we use your data
We use your data solely to provide the wtewte service — to receive your requests, send you recommendations, and communicate with you about your account or request. We do not sell your data to third parties. We do not use your data for advertising.
Who we share data with
We use the following third-party services to operate wtewte:
- Brevo — transactional email (sending verification emails, password resets, and recommendations). Brevo processes your email address on our behalf.
- Cloudflare — CDN and DDoS protection. Cloudflare processes your IP address as traffic passes through their network. Cloudflare is based in the United States; transfers are protected by Standard Contractual Clauses under their Data Processing Addendum.
- OVHcloud — server hosting. Our servers are hosted in the European Union.
All third-party providers are bound by data processing agreements and may not use your data for their own purposes.
How long we keep your data
Registered users: We keep your data for as long as your account is active. If you delete your account, all your personal data — including your profile, requests, and recommendations — is permanently deleted immediately.
Guests: Guest request data (name, email, and request details) is retained until you request deletion. Tracking links expire 90 days after submission. You may request deletion of your guest data at any time by emailing [email protected].
We do not retain any backups of deleted data.
Your rights
Under UK GDPR and EU GDPR, you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate data via your profile page (registered users) or by contacting us (guests).
- Erasure — delete your account and all associated data at any time from your profile page (registered users), or by emailing us (guests).
- Portability — request your data in a machine-readable format.
- Object — object to processing of your data.
- Complain — lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
Cookies
We use a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function and does not track you for advertising purposes. No third-party cookies are set by wtewte.
Security
Passwords are never stored in plain text — they are hashed using bcrypt before storage. All data is transmitted over HTTPS. We take reasonable technical measures to protect your data against unauthorised access.
Changes to this policy
If we make significant changes to this policy, we will notify registered users by email. The "Last updated" date at the top of this page will always reflect the most recent version.
Contact
Questions about this policy? Email us at [email protected].