Privacy Policy

Last Updated: 23 May 2025

1. Who We Are

This Privacy Policy explains how Veggeo® (operated by Vizorent Ltd, a company registered in England & Wales) collects, uses, and protects your personal data when you use our mobile application, website, and related services (collectively, the “Service”). The Veggeo mobile app is currently available only in the United Kingdom and the United States. Our website is available worldwide. Vizorent Ltd is the data controller for all personal data processed through the Service.

For the contractual terms that govern use of the Service, please also see our Terms & Conditions.

2. Information We Collect

To enhance your experience and provide tailored recommendations, we collect the following categories of data:

  • Personal Information (voluntarily provided): name or nickname, email address, phone number (used for one-time password authentication and optional SMS updates), dietary preferences, and precise or approximate location (with explicit consent).
  • Automatically Collected Data: device information (e.g., OS, model), interaction metrics (screens viewed, taps, session length), IP address and coarse location, crash logs, device push‑notification token, and analytics data via Google Firebase or similar tools.

Our website uses cookies and similar technologies; see our separate Cookie Notice for details.

3. How Your Data Is Used

We use the information above to:

  • Deliver personalised food‑ and wellness‑related recommendations—such as nearby restaurants that meet your dietary preferences and suitable fitness or wellbeing venues—based on your stated interests and location.
  • Improve the usability, performance, and safety of the Service.
  • Provide customer support and respond to inquiries.
  • Send service notifications (enabled by default) and optional marketing messages, push notifications, or SMS updates (sent only after you opt in, and you may opt out at any time).

We do not sell or rent your personal data to third parties.

4. Legal Bases (UK GDPR)

Under the UK GDPR, we process your data using one or more of the following legal bases:

  • Consent – e.g., for location services, marketing emails.
  • Contract – to provide the Service you request.
  • Legitimate interests – to improve and secure our Service, provided those interests are not overridden by your rights.
  • Legal obligation – where we must comply with applicable law.

5. Location Permissions

When enabled, your device’s location data helps Veggeo suggest nearby venues. You can withdraw permission at any time in your device settings. We retain only the minimal location data required to deliver core features. For example, we may store venues you actively save to your Favourites or a small set of recently viewed or visited places, but we never maintain a continuous location timeline or systematically track your movements.

6. Data Security & Retention

  • All traffic is encrypted in transit (TLS) and sensitive data is encrypted at rest.
  • Data is hosted with reputable cloud service providers. Primary storage regions currently include the United Kingdom and the United States (we may add EU regions in future).
  • Marketing consents are retained for up to 3 years; transactional data for up to 7 years, unless you request deletion sooner or a longer period is required by law.

7. International Data Transfers

We host and process personal data on secure cloud infrastructure provided by Google Cloud Platform and Microsoft Azure. Our primary storage regions are the United Kingdom and the United States. When personal data is transferred outside the United Kingdom, we apply one of the following safeguards:

  • the UK International Data‑Transfer Agreement (IDTA),
  • the EU Standard Contractual Clauses together with the UK Addendum, or
  • an adequacy regulation / decision issued by the UK Government or the European Commission.

We have completed a transfer‑risk assessment in line with ICO guidance and will update this section—and notify you where required—if our hosting regions or transfer mechanisms materially change.

8. Third‑Party Services

We integrate trusted third‑party providers—for example, Google Firebase for analytics and crash reporting, Google Maps SDK for geospatial data, machine‑learning or AI services that help personalise recommendations, and cloud hosting services. These providers process data on our instructions and are bound by contracts ensuring GDPR compliance.

9. Your Rights

You have the right to:

  • Request access to, correction of, or deletion of your personal data.
  • Withdraw consent at any time without affecting prior processing.
  • Receive a portable copy of your data.
  • Object to certain processing or request restriction.
  • Lodge a complaint with the UK Information Commissioner’s Office (ICO).

To exercise any right, email us at [email protected].

California or other U.S.‑state residents may have additional rights under applicable privacy laws; please contact us to exercise them.

10. California Privacy Rights

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to:

  • Request disclosure of the categories and specific pieces of personal information we collect about you.
  • Request deletion of your personal information.
  • Opt-out of any “sale” of your personal information.
  • Not be discriminated against for exercising any of these rights.

We do not sell or share your personal information as defined under California law. To exercise your CCPA/CPRA rights, email us at [email protected].

11. Children’s Privacy

Veggeo is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18.

12. App Store‑Specific Disclosures

  • Apple App Store (iOS): We do not track users across apps and websites for advertising purposes. Should future features require App Tracking Transparency (ATT) consent, you will be asked explicitly.
  • Google Play (Android): All data collected is encrypted in transit and can be deleted upon user request via in‑app settings or by emailing us. We share data only with service providers as described above and never for advertising profiling without your consent.

13. Changes to This Policy

We may update this Privacy Policy to reflect new features (e.g., AI personalisation). We will notify you of significant changes via the app, website banner, or email. Minor editorial updates that do not materially affect your rights may be posted without additional notice. The “Last Updated” date at the top will always indicate the latest revision.

14. Contact

Vizorent Ltd (operator of Veggeo)
86‑90 Paul Street, London, EC2A 4NE, United Kingdom
Email: [email protected]
ICO Registration No. ZB898140


This Policy applies to veggeo.com, the Veggeo mobile app(s), and any beta or test versions we release.

Veggeo® is a registered trademark of Vizorent Ltd.