Peche values your privacy and is committed to safeguarding your personal data when using our application, visiting our website or communicating with us.

Who We Are:

Peche Hospitality Ltd, a UK-registered company with company number 14531728, is the controller of the information we collect, control, process and use about you (your “personal data”). All references in this Privacy Policy to “Peche”, “our”, “us” or “we” refer to Peche Hospitality Ltd.

When we talk about the “site”, we mean our mobile application, our website, any communications we send or services we provide to you.

This Privacy Policy applies if you are using our services from within the EU or the UK, and it explains:

  • What personal data we collect from you.
  • How we use and share your personal data.
  • How we store your personal data.
  • Your rights over your personal data.

Personal Data We Collect from You:

We collect and process the following personal data:

Personal data you provide us:

When you download Peche and use it for the first time, we ask you to register and provide us with the following personal data relating to you: (i) your name; and (ii) email address.

We also collect and process your personal data when you use our site. When you use Peche, we will collect information about your use of the site. For example, we collect information on the date and time and device you have accessed our mobile app on. We also collect information on how you engage with content on the mobile app.

AI-assisted recipe tools

If you choose to use AI-assisted recipe import, we process the recipe text or image you supply. Although recipe material will not ordinarily identify a person, it may include names, handwritten notes or other personal data.

We also process the structured recipe draft created from the source and limited information about the request. This includes the user and team associated with the request, basic information about the source, processing status and timestamps, the model and system versions used, and whether the draft was reviewed, changed or saved.

Peche does not retain the original recipe text or image in its application database or ordinary application logs after processing. Please only upload content that you or your organisation are authorised to use, and avoid including personal data that is not needed to import the recipe.

Personal data we receive from third parties:

We may receive certain personal data, such as your name, from your employer if they have signed up to use our services. We will only use this information to tailor the content that is delivered to you on our site.

How We Use Your Personal Data and Our Legal Basis:

We control and process the personal data you provide to us or we receive from your employer to:

  • Operate our site and provide our services: We use personal data to provide the functionality on our site, including to allow you to register for an account, and to provide our services to you, i.e. to provide you content through the mobile app. We do this to meet our obligations to you under the Terms and Conditions.

  • To provide AI-assisted recipe tools:

    When you ask Peche to import a recipe using AI, we use the selected text or image to create a structured recipe draft for you to review and edit before deciding whether to save it. We process this information because it is necessary to provide the feature you request under our Terms and Conditions.

    We use limited technical and usage information to protect, monitor, troubleshoot and improve the reliability of the feature. We do this based on our legitimate interests in providing a secure and reliable service.

    AI-generated content is presented for human review. Peche does not use this feature to make legal or similarly significant decisions about you.

  • To personalise the content you receive: By collecting data on your activities on our site, we’ll be better able to understand the type of content and information you should receive through our services. We’ll then present the most relevant materials to you based on your training needs. We do this to meet our obligations to you under the Terms and Conditions and provide you with the services you have signed up for with us.

  • To communicate with you: We may need to communicate with you from time to time as part of the provision of our services. We will only do so if there is a need, for example, to let you know about changes to our Terms and Conditions or to this Privacy Policy. We do this to provide our services to you in accordance with the Terms and Conditions.

  • To provide a better experience: We will use your personal data to improve our services and your experience on our site. For example, we will use your data to prepare reports on how our services are functioning to ensure they are intuitive and respond to the needs of our users. This information will be processed in aggregated form and anonymised as far as reasonably possible. We process this data based on our legitimate interests to evaluate our performance and ensure the best service possible for our users.

  • To provide reports for our business users: Where your employer has signed up for our services, we will process your personal data (in aggregated form) to prepare reports on employee use of our services. These reports will be limited to statistical reports on engagement with our services. We will process this information based on our legitimate commercial interests to provide other aspects of our services.

  • To comply with our legal obligations: We will process your personal data where required to comply with any procedures, laws and regulations that apply to us. We will do so based on our legitimate interests or when legally required.

  • To establish, exercise or defend our legal rights: We will process your personal data in accordance with our legitimate interests or the legitimate interests of others, and where legally required, in order to establish, exercise or defend our legal rights.

If we are relying on our legitimate interest to process your personal data, we will ensure that our (or the third party’s) legitimate interests are not outweighed by your interests or fundamental rights and freedoms. If we process your data based on our, or a third party’s, legitimate interest, you have the right to object to the processing. For more information on your rights, see the section Your Rights below.

How and Why We Disclose Personal Data:

We share your personal data with the following third parties or categories of third parties:

  • Our service providers and subcontractors, including cloud service providers and suppliers of technical and support services;

  • Amazon Web Services (AWS), which provides Amazon Bedrock. When you use AI-assisted recipe import, Amazon Bedrock processes the selected recipe text or image using an Anthropic Claude model. Peche submits the content to Amazon Bedrock and does not submit it directly to Anthropic.

    AWS states that Bedrock model providers cannot access customer prompts or outputs and that Bedrock content is not used to improve the underlying base models. Peche does not use selected recipe text or images to train generative AI models.

  • Our legal and professional advisors; and

  • [Your employer.]

Any third parties we share your personal data with are limited (by law and by contract) in their ability to use your personal data for any purpose other than to provide services for us. We will always ensure these third parties are subject to privacy and security obligations consistent with this Privacy Policy.

[Where we share your personal data with your employer, we will take all steps to anonymise your personal data and only share it in aggregated form as part of the reports we provide for employers who sign up for our services.]

We will also disclose your personal data to third parties:

  • Where it is in our legitimate interests to operate and grow our business.
  • If we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer.
  • If we are under a duty to disclose or share your personal data to comply with any legal obligation, lawful request from government or law enforcement officials or to prevent illegal activity.
  • To comply with our Terms and Conditions or to respond to any claims, to protect our rights or the rights of a third party or to prevent any illegal activity.
  • To protect the rights, property, or interests of Peche, our staff, customers, or other persons.

Save as identified above, we will never share or sell your personal data to any third party without notifying you and, where necessary, obtaining your consent.

International Transfers of Your Personal Data:

We use, store, and access your personal data from the UK. As described above, we may share your personal data with third parties, some of which are located outside of the UK and the EEA. If we transfer any personal data about you to such recipients, we will take appropriate measures to ensure the recipient protects your personal data adequately and in accordance with this Privacy Policy.

For AI-assisted recipe tools, Peche uses Amazon Bedrock through AWS's European geographic processing profile. Requests may be processed in designated AWS Regions within that European boundary. AWS states that information transmitted between those Regions is encrypted across its network.

Where processing involves a transfer of personal data outside the UK or European Economic Area, we use an applicable adequacy decision or contractual safeguards approved under UK and European data-protection law.

Further details on the steps we take to protect your personal data is available from us on request by contacting us (see Contact Us below).

Data Retention:

We keep your personal data for as long as you have an account with us or as necessary to provide our services to you. We only retain logs on your use of our mobile app for a limited period. Other data, such as your name and email address, are stored for a period after you have closed your account with us as is necessary to operate our business, to comply with our legal obligations, and enforce and defend our rights.

Keeping Your Information Secure:

We have put in place reasonable technical and organisational measures to safeguard your personal data. Please note that although we take all reasonable steps, no website, internet transmission, computer system or wireless connection is completely secure.

Your Rights:

You have certain rights under data protection law. The exercise of these rights may be subject to exemptions and restrictions.

You have the right to request access to your data or request that we restrict processing. You also have the right to request rectification, erasure, or transfer of your personal data to a third party. If we rely on our legitimate interests to process your personal data, you may object to this processing. If we process based on your consent, you may withdraw this consent at any time. The withdrawal of consent will not affect the lawfulness of any prior processing of your personal data.

You also have the right to make a complaint about our data processing to your local supervisory authority.

To exercise any of your data protection rights, contact us (see Contact Us below).

Contact Us:

If you have any queries or complaints about our collection, use or storage of your personal data, or if you want to exercise any of your rights, please contact: info@pechehospitality.com.