POURMATCH Holdings Limited ("PourMatch", "we", "us", "our"), a company incorporated in England and Wales, registered number 17324996, registered office 128 City Road, London, EC1V 2NX, United Kingdom, is the controller of the personal data described in this Notice, save where stated otherwise. You can contact us at PourMatch2026@gmail.com.
This Notice applies to: (a) consumers and guests who use the PourMatch consumer app or QR-accessed menu ("Consumers"); and (b) individuals at restaurants and other business customers who use the PourMatch platform ("Business Contacts"). Where practices differ between these groups, this is noted below.
As PourMatch is a global platform, this Notice applies UK GDPR-standard protections as a single baseline for all Consumers and Business Contacts, wherever they are located, rather than varying our practices by country. Where a specific country's law requires something beyond this baseline, we will address it as that need becomes concrete for our business, rather than pre-emptively.
3.1 From Consumers: account details (email address and, where applicable, a hashed password); food and wine preferences selected during use; ratings and star reviews; free-text feedback and comments; visit and QR scan history; favourites; and approximate session/device information and IP address, used among other things to apply fair-use limits on pairing requests and to protect the Service from abuse.
3.2 From Business Contacts: name, email address, and other contact details provided when registering an account or subscribing; content uploaded about the restaurant's menu, wine list, and pricing; and, where applicable, point-of-sale integration data such as product names and stock levels. This does not include payment card details.
3.3 We do not collect payment card data directly, and do not intend to under the planned e-commerce model. See Section 6 for how payment will be handled once that functionality is introduced.
We use personal data to: provide and operate the Service (performance of a contract); generate wine pairing recommendations and, where applicable, AI-generated summaries of feedback (performance of a contract and our legitimate interests in improving the Service); prevent abuse and enforce usage limits (legitimate interests in protecting the Service); communicate with Business Contacts about their account (performance of a contract); and comply with our legal obligations.
5.1 Wine pairing suggestions and descriptions are generated using AI tools, including Anthropic's Claude models, which process menu and wine data supplied by the restaurant together with the Consumer's stated preferences.
5.2 Where a Consumer submits free-text feedback about their visit, it is analysed using AI tools to generate a grade from 1 (poor) to 5 (excellent) for each category the comment actually addresses — Food, Wine, Pairing, and/or Drinks — covering only the categories the Consumer actually mentioned. The relevant restaurant can view both these AI-generated category grades, in aggregate and by individual comment, and the underlying free-text comment itself, through their own Analytics dashboard. Feedback is never shown to other Consumers or to other restaurants. A restaurant may hide a comment from its own dashboard view but cannot edit the comment text or the AI-generated grades, and a Consumer cannot edit or withdraw feedback once submitted.
We share personal data with the following categories of service providers, who process it on our behalf under contract: Supabase (database hosting and storage); Vercel (application hosting); Anthropic (AI processing, as described above); Google Cloud (menu scanning / optical character recognition); Spoonacular (food and ingredient data); Upstash (rate-limiting infrastructure); Make.com (automation of restaurant stock-level alerts, which processes point-of-sale email data on behalf of the relevant restaurant); and GoDaddy / Vercel (domain name and DNS services). For e-commerce functionality: payment is handled entirely by Stripe/Wise via their own hosted payment page. PourMatch shares your name, email, and order reference with them to process payment, but does not receive or store your card or bank details.
We also share aggregated or restaurant-specific feedback and analytics with the relevant restaurant, as described in clause 5.2 above. We do not sell personal data to third parties.
Our service providers may process personal data outside the country where a Consumer or Business Contact is located. As PourMatch is used globally, this may involve transfers to or from many different countries, potentially including countries within Europe.
Ratings, feedback, visit history, and other data generated by Consumers belong to the Consumer's relationship with PourMatch, not to any individual restaurant, and are retained as part of the Service regardless of whether the restaurant to which they relate continues to subscribe. A restaurant's food menu, wine list, and drinks list items are likewise retained on an ongoing basis to power the wine pairing functionality available to Consumers, whether or not the restaurant maintains a paid subscription. This menu, wine list, and drinks list content is business information, not personal data, so any question about removing it from the platform is addressed in our Restaurant Terms of Service rather than this Notice. If a Business Contact's subscription ends, features that depend on an active Subscription Plan, including menu design, website hosting, and analytics, are deactivated and any related configuration is reset to default settings, as for a new account with no prior activity. If a Business Contact closes their PourMatch account entirely, their personal account details, such as name and email, are retained for 30 calendar days, after which they are deleted.
We apply technical and organisational measures to protect personal data, including issuing each restaurant's point-of-sale integration its own unique credentials and applying access-controlled data policies at the database level.
Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to receive a copy of it in a portable format. To exercise any of these rights, contact us at PourMatch2026@gmail.com.
The Service is not directed at children and is not intended for use by anyone below the minimum age described in our Terms of Use. We do not knowingly collect personal data from children.
We currently use only the cookies and similar technologies necessary to operate the Service, such as maintaining a session or guest visit.
We may update this Notice from time to time. Material changes will be notified through the Service or by other reasonable means.
If you are unhappy with how we handle your personal data, please contact us first at PourMatch2026@gmail.com. You also have the right to lodge a complaint with the relevant supervisory authority. As PourMatch is established in the UK, this is the Information Commissioner's Office (ico.org.uk). Depending on where you are located, you may also have the right to lodge a complaint with your own country's data protection authority.
PourMatch