Privacy Policy

The website and related services are operated by Jack’s Burger. The legal entity named as the data controller should be confirmed before publication. The developer’s current legal-content draft identifies the company as Jack’s Burger Franchises Ltd, 139 Wilbraham Road, Manchester, M14 7DS, United Kingdom. Company Registration Number: 15341721

Contact: info@jacksburgeruk.com | Website: jacksburgeruk.com

• Identity and contact information such as name, email address and telephone number.
• Delivery information such as delivery address and postcode when required to fulfil an order.
• Account information, including login details and preferences.
• Order and transaction information, including items ordered, selected branch, order status, collection/delivery details and relevant refunds or complaints.
• Loyalty information, including Spice Club membership details, points, rewards, redemptions and relevant activity.
• Marketing preferences and records of consent or opt-out choices.
• Technical information such as IP address, browser/device information, security logs and information generated when you use our website or app.
• Location information where you choose to allow an app or device to provide it, for example to help identify a nearby branch or support delivery.
• Information you provide when contacting us, submitting feedback, reviews, complaints or enquiries.

Payments may be handled by external payment providers. Jack’s Burger does not intend to store complete payment-card details where these are securely processed by the relevant payment provider. We may receive limited transaction information needed to confirm and reconcile a payment.

• To create and administer customer accounts.
• To accept, prepare, process and deliver orders and provide collection services.
• To communicate with you about orders, service issues, refunds and customer support.
• To administer Spice Club and provide points, rewards, discounts and related account services.
• To send promotional communications where permitted by law and, where required, where you have given consent.
• To understand customer preferences and improve menus, services, branches and customer experience.
• To prevent fraud, misuse, security incidents and other unlawful activity.
• To maintain business, accounting, tax and operational records and comply with legal obligations.
• To manage competitions, promotions and other customer engagement activities where applicable.

We may use customer information to provide news, offers, promotions and loyalty communications. We will comply with applicable UK data-protection and electronic-marketing rules. Where consent is required for email, SMS or other electronic marketing, we will obtain appropriate consent and provide an easy way to withdraw it. Where the law permits another lawful basis, we may use that basis, while respecting your right to object to direct marketing.

You can unsubscribe from marketing at any time by using the unsubscribe facility in a message, changing your communication preferences where available, or contacting info@jacksburgeruk.com.

Jack’s Burger may operate its loyalty and promotional programme, including Spice Club, across businesses under common management or within the same business group. Where appropriate and lawful, relevant customer information may be shared with or accessed by another company in the same group for loyalty administration, customer support, promotions, marketing, reporting and internal administration.

Where another group company determines its own purposes and means of processing, it may be a separate data controller. Where a company or service provider processes data only on Jack’s Burger’s instructions, it will generally act as a processor. The precise controller/processor position will depend on the arrangements in place.

We do not sell personal data to third parties.

• Jack’s Burger branches and authorised staff where necessary to prepare and fulfil an order or provide customer service.
• Companies within the same business group where necessary for the purposes described in this Policy, including loyalty and promotional activities.
• Technology and service providers that host, maintain or support our website, POS, ordering, CRM, loyalty, communications and related systems.
• Payment providers and financial-service providers to process or reconcile payments.
• Delivery providers and delivery/order aggregation partners where required to fulfil delivery orders.
• Professional advisers, insurers, auditors and similar service providers where reasonably necessary.
• Law enforcement, regulators, courts or other authorities where disclosure is required or permitted by law.

Depending on the purpose, we may rely on performance of a contract, legal obligation, legitimate interests or consent. For example, processing an order is generally necessary to perform the customer’s contract; keeping certain financial records may be necessary to comply with legal obligations; and some operational, security or carefully assessed marketing activities may rely on legitimate interests. Where consent is required, it will be requested separately and can be withdrawn.

Some suppliers may process data outside the UK. Where this occurs, we will use an appropriate lawful transfer mechanism and safeguards required by applicable data-protection law.

• Request access to personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Request deletion where applicable.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests and object at any time to direct marketing.
• Request data portability where the right applies.
• Withdraw consent where processing relies on consent.

To exercise a right, contact info@jacksburgeruk.com. We may need to verify your identity before completing a request.

You may also complain to the UK Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed completely secure.

Our services are intended for general customers. We do not knowingly seek to collect personal information from children where the law requires parental involvement or other safeguards. If you believe a child has provided personal information inappropriately, contact us.

We may update this Policy from time to time. The latest version will be published on this page with a revised 'Last updated' date.