Privacy notice

The short version

• Maggie Fu runs Fu Club. We are MF Hanover Street Limited, trading as Maggie Fu. We decide what happens to your information.
• We collect what we need to run Fu Club, the queue, gift cards and the guest Wi-Fi, and nothing for advertising. We never sell your information.
• Offers and news only if you say yes, with a separate switch for email, text messages and notifications, each off until you turn it on. Change them at any time in the app.
• You can see, correct and delete your information. Delete your account in the app or at /account/delete, or ask us.
• No tracking cookies, no analytics, no adverts. That is why there is no cookie banner.

Who we are

Fu Club is the rewards club of the Maggie Fu restaurants. It is run by MF Hanover Street Limited (company number 12441270), trading as Maggie Fu. We are the "controller" of the information in this notice, which means we decide why and how it is used.

• Registered with the Information Commissioner's Office (ICO), number To be decided: TO CONFIRM: ICO registration number (C-17).
• Registered office: Unit 5 Connect Business Village, 24 Derby Road, Liverpool L5 9PR To be decided: TO CONFIRM: that this is the address to print.
• Questions about your information: To be decided: TO CONFIRM: contact email and postal address (data map question 7).

Slancio LTD builds and runs Fu Club for us. It uses your information only on our instructions, under a written contract that UK data protection law requires.

This notice covers the Fu Club app, the website (the queue, gift card and account pages) and the guest Wi-Fi page at our restaurants.

What we collect and why

The law asks us to say why we use each piece of information. We rely on one of these reasons, which the law calls the "lawful basis":

• Contract: to give you the membership, rewards or gift card you asked for.
• Consent: for offers and news, only when you have said yes.
• Legitimate interests: things you would reasonably expect, such as texting you when your table is ready, counting visits, seeing how many people opened an offer, and keeping Fu Club safe from fraud and misuse.
• Legal obligation: records the law requires us to keep, such as accounting records of gift card money and proof of what you agreed to.

When you join Fu Club

• What: your email address and first name, and if you choose to give them, your last name, birthday (day and month only, never the year), favourite restaurant and mobile number. We also record which version of our terms and this notice you saw.
• Why: to run your membership: signing you in, showing your membership code, recording your visits and rewards, giving you a birthday treat, and filling in your details when you join a queue.
• Lawful basis: contract.

You can join in the app, or on the guest Wi-Fi page at our restaurants.

Your visits, points and rewards

Each time you visit and show your membership code, our staff scan it and enter the bill total, so we can work out what you have earned. We keep, as one membership across all our restaurants:

• your visits: which restaurant, when, the bill total and what it earned;
• your points, every change to them, and the reason for any correction;
• the rewards you have been given and the ones you have claimed.

Which member of our staff recorded each visit or claim is kept too, so mistakes can be put right.

• Lawful basis: contract.

Signing in

We sign you in with a six-digit code sent to your email, never a password. We keep the code only in scrambled form, and it works for 10 minutes. We also keep a record of each phone you are signed in on, so you stay signed in; you can see these in the app and sign them out. If you do not use the app for 90 days, you are signed out.

• Lawful basis: contract.

Offers and news

We only send offers and news if you turn on the switch for that channel: one each for email, text messages and notifications. They are off until you turn them on, and you can turn them off at any time in the app's Account screen, or with the unsubscribe link in any offers email. Every change is recorded with the exact words you saw, so we can show what you agreed to. To be decided: TO CONFIRM: whether to keep the text message switch, as we do not send offers by text yet

We choose who gets an offer by their favourite restaurant and how recently they visited. We never send offers between 21:00 and 09:00, and never the same offer twice. When you tap an offers notification, the app tells us, so we can count how many people opened it. To be decided: TO CONFIRM: that you are happy to count taps

• Lawful basis: consent (UK GDPR and the Privacy and Electronic Communications Regulations); legitimate interests for counting taps.

Messages you need to use Fu Club, such as your sign-in code, a gift card receipt or a text that your table is ready, are not marketing and are sent whatever your switches say.

Push notifications

If you allow notifications on your phone, the app gets a token from Apple or Google that lets us send to that phone. We send through Expo, which passes the message to Apple or Google. Notifications about your membership never include your name. You can turn notifications off at any time in your phone's settings.

• Lawful basis: contract for messages about your membership; consent for offers and news.

Joining the queue

• What: your name, mobile number, how many are in your party, and any note you add. If you are signed in to the app, the queue entry is linked to your membership.
• Why: to hold your place and text you when your table is ready. Your number is never shown on the restaurant's tablet.
• Lawful basis: legitimate interests: you asked us to text you.

When you join from the door code on your phone, we set one small cookie with a random number in it, so the same phone keeps its place in the queue and cannot fill it with fake parties. We store only a scrambled version of that number with your place. It is not your phone's hardware identifier.

Buying a gift card

Gift cards are sold on our website only, not in the app. You do not need to be a member.

• What: your name and email address, the amount and design. If the card is for a friend, their name and email address and the note you write to them.
• Why: to take your payment, issue the card, send you a receipt, send the card to your friend, and remind whoever has the card before it expires.
• Lawful basis: contract for you as the buyer; legitimate interests for your friend, so we can deliver the gift.

You pay on Stripe's secure page, by card, Apple Pay or Google Pay. Your card details go straight to Stripe and never reach us. To make the order, we pass Stripe the details above, including your friend's name, email and note, and Stripe tells us the payment went through.

To stop stolen cards being used to buy gift cards, one email address can buy at most 5 cards, or £300, in a day. We keep a scrambled version of your email address and of your internet address to check this, never the addresses themselves. A payment over the limit is refunded in full automatically, and we email you to say so.

The guest Wi-Fi

To be decided: TO CONFIRM: the guest Wi-Fi page is built but not live yet; the supplier at each site is still to be chosen (C-10)

You can always connect to the Wi-Fi without joining Fu Club, and without giving us any details. On the Wi-Fi page you choose to join Fu Club, sign in as a member, or just connect.

• What, for everyone: a scrambled version of your device's Wi-Fi address, which restaurant, when, and the Wi-Fi terms you accepted. The Wi-Fi equipment at the restaurant sends us your device's address; we never store it as it is. Most phones change that address from time to time, so we can only recognise a device for a short while.
• What, if you join or sign in: your email, and if you join, your first name and, if you choose, your mobile number, and any offers boxes you tick.
• Why: to let you on, to count visits, and to give members credit for visiting.
• Who sees it: while a member is on the Wi-Fi, that restaurant's managers can see their first name, when they last visited and their points, so they can say hello.
• The app link: when you join Fu Club on the Wi-Fi, or first sign in there, we email you once with the link to get the app. It is part of your membership, not marketing.
• Lawful basis: legitimate interests for letting you on and counting visits; contract for a member's visit; consent for any offers.

We let you on straight away, then email you to confirm your address. Until you confirm, we do not create a membership, link the visit to anyone or send any offers, and if you never confirm we delete what you typed after 7 days. Once you confirm on that phone, we set a cookie on it for 14 days so the page can welcome you back.

Keeping Fu Club safe

• We keep a record of who at Maggie Fu looked at or changed a member's details, points or a gift card, with the time and the internet address and browser used, so misuse can be spotted.
• Our server logs are used to fix faults. Names, emails, mobile numbers, codes and passwords are removed from them automatically.
• When something breaks in the app or on the website, a crash report goes to Sentry, with names, emails, mobile numbers, codes and links that work as passwords removed first. To be decided: TO CONFIRM: crash reports are built but switched off until you agree (question 7)
• We keep encrypted backups so nothing is lost if something goes wrong.

• Lawful basis: legitimate interests (security and preventing fraud).

Who can see it

• Counter staff use the tablet at their own restaurant: the queue (names, party sizes and notes, never mobile numbers), and a member's or a gift card's balance when they scan it. They cannot look through members.
• Managers can see members' details, and every time they open a member's details it is recorded. They can see a gift card's balance and history, but not the buyer's or recipient's email.
• Owners can see everything, and only owners can refund gift cards, export data or delete a member's information on request.
• Slancio, who build and run Fu Club for us, for support.

We do not sell your information, and we do not share it with advertisers.

Who we share it with

These companies process information for us. Each is bound by contract to use it only to provide their service.

Stripe processes payments under its own contract with us and is responsible for your card details under its own privacy policy. It keeps the order details we pass it for as long as its own rules say.

We would only share your information with anyone else if the law requires it, for example to the police with a valid request.

Outside the UK

Almost everything stays in the UK, in London. The exceptions:

• Push notifications: the token for your phone and the text of the notification go through Expo, Apple and Google in the United States. That transfer is protected by the UK-US data bridge where the company is certified, or by the UK's approved contract terms.
• Crash reports, if switched on, go to Sentry in the European Union, which UK law treats as giving the same protection as the UK.

How long we keep things

To be decided: TO CONFIRM: these periods are our proposal (data map question 3)

Your rights

You can ask us to:

• give you a copy of the information we hold about you;
• correct anything that is wrong (you can change your name, email, mobile, birthday and favourite restaurant in the app yourself);
• delete your information;
• stop or limit how we use it, or object to us using it for our legitimate interests;
• give it to you in a form you can take elsewhere.

Offers and news: turn the switches off in the app at any time, or use the unsubscribe link in an offers email. It does not affect anything else.

Deleting your account: in the app, go to Account and then Delete account. Without the app, use /account/delete. Either way we email you a code to confirm it is you. Deleting your account removes your name, email, mobile and birthday, signs you out everywhere, and your points and rewards are lost. Gift cards keep working with their code. We keep the gift card money records the law requires, and the record of what you agreed to, with nothing on them that names you.

A copy of your information, or anything else: email us at To be decided: TO CONFIRM: contact email. This includes gift card buyers and Wi-Fi users who are not members. We may ask you to confirm it is you, usually by replying from the email address we hold. We reply within one month, and it is free.

Complaints

If you are unhappy with how we have used your information, please tell us first at To be decided: TO CONFIRM: contact email. We will acknowledge your complaint within 30 days and tell you what we are doing about it.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Children

Fu Club is for people aged 18 and over To be decided: TO CONFIRM: 18 and over (data map question 4). We do not ask for your year of birth, so we rely on you telling us you are 18 or over when you join.

Cookies

Our web pages set only the cookies they need to work, and no others:

• the queue cookie described above, when you join a queue from your phone. It lasts a day;
• the Wi-Fi cookie described above, on a phone where a member confirmed their email on the Wi-Fi page. It lasts 14 days;
• sign-in cookies for Maggie Fu staff on the admin pages and on the restaurant tablets.

The app keeps your sign-in on your phone in its secure storage. Stripe's payment page is Stripe's own website and sets its own cookies to keep payments secure. We use no analytics, advertising or tracking cookies, on the website or in the app. Because every cookie we set is needed for the page to work, the law does not ask us for a cookie banner.

Changes to this notice

When we change this notice we update the version and date at the top. If a change affects how we use your information, we will tell members in the app before it takes effect. Every marketing choice records which wording you agreed to.