Privacy Policy

WIMPY UK PRIVACY STATEMENT

This page is designed to help you understand what Wimpy UK does with the information it holds about you, which we refer to as “personal information”. 

Wimpy UK is a franchise. This means that Wimpy UK does not own or operate the “Wimpy” branded restaurants.

Instead, individual businesses have been given permission to use the “Wimpy” name, provided that they meet various conditions, for instance ordering goods from us, using our menu and complying with our quality guidelines. 

Wimpy UK does not therefore generally have access to or collect any personal information in-store, although the store may occasionally collect personal information from you on our behalf as part of a national marketing campaign or competition. Where this is the case, it will be clear from the form, but if in doubt please contact us and we can clarify.

This page only provides information about how Wimpy UK processes your personal information. 

For information on how a particular Wimpy restaurant processes your personal information, or to exercise your rights in respect of personal information processed by a Wimpy restaurant, please contact that restaurant. You can find the contacts for each branch on the “Restaurant Locator” page of our website.

Who are Wimpy UK, and how do I contact them?

Wimpy UK is a business based in the United Kingdom. 

Wimpy UK’s legal name is Wimpy Restaurants Group Limited. It is a limited company registered in England with the company number 02458406, and has its registered address at 2, The Listons, Liston Rd, Marlow, Buckinghamshire, SL7 1FD, UK.

You can contact Wimpy UK:

  • by letter by writing to Wimpy UK, 2 The Listons, Liston Rd, Marlow, Buckinghamshire SL7 1FD, UK
  • by phone on 01628 891 655

How does Wimpy UK use my personal information?

We use personal information for the reasons set out below. 

To find out more about a particular reason, including about what information we use, where we obtain it from, our legal justification for using it in that way, who we share it with, how long we keep the personal information for (for that purpose) and what to do if you want us to stop, you can expand the reason by click on it.

How does Wimpy UK use my personal information to send me its newsletter where I have signed up for it?

• What personal information is used to send me the Wimpy UK newsletter?

We use your email address to send you the newsletter, and your name to personalise how we address you in the newsletter.

• Where does Wimpy UK obtain my personal information from to send me the Wimpy UK newsletter?

We obtain your personal information to send you our newsletter either:

  • via a newsletter sign up form on our website or in a Wimpy restaurant; or
  • where you have consented to joining our newsletter on another form, such as a competition entry form (which may be online or in a Wimpy restaurant).

• What is Wimpy UK’s legal justification for sending me its newsletter?

Wimpy UK relies on consent to send you its newsletter.

Where you complete a newsletter sign up form, we will imply this consent on the basis that the sole purpose of completing the form is to receive the newsletter, and the form’s purpose is obvious to the end user.

• Who does Wimpy UK share personal information with for this purpose?

Wimpy UK will only share personal information in connection with its newsletter with its service providers, such as its email delivery provider and its marketing agency.

• What should I do if I want Wimpy UK to stop sending me its newsletter?

You can withdraw your consent at any time by either:

  • clicking on the unsubscribe link at the bottom of each of the newsletter emails; or 
  • by contacting us using the details provided in the “Who are Wimpy UK, and how do I contact them” section above.

• How long does Wimpy UK keep personal information for this purpose?

We will retain personal information for this purpose until you unsubscribe from our newsletter, or until two years has elapsed and you haven’t positively responded to our emails asking you to confirm you wish to continue receiving our newsletter.

How does Wimpy UK use my personal information to tailor the newsletter that it sends me?

• What personal information is used to tailor the Wimpy UK newsletter?

We may use any personal information we hold to tailor the newsletter that we send you.

For instance, where we have told us your favourite Wimpy restaurant, we may tailor the newsletter to offers specific to your area, or where you provide your date of birth, we might send you a birthday treat!

Where does Wimpy UK obtain my personal information from to tailor the Wimpy UK newsletter?

We obtain your personal information to tailor the newsletter we send you either:

  • via a newsletter sign up form on our website or in a Wimpy restaurant; or
  • where you have consented to joining our newsletter on another form, such as a competition entry form (which may be online or in a Wimpy restaurant).

What is Wimpy UK’s legal justification for tailoring its newsletter?

Our legal justification for tailoring our newsletter is our legitimate interests in personalising your experience with Wimpy UK, therefore improving the open and click rates of the emails we send you to improve our return on investment in email marketing activities.

Who does Wimpy UK share personal information with for this purpose?

Wimpy UK will only share personal information in connection with its newsletter with its service providers, such as its email delivery provider and its marketing agency.

What should I do if I want Wimpy UK to stop tailoring the newsletter it sends me?

As we rely on legitimate interests as our legal justification, you have the right to object to us processing your personal information in this way.

To object, please contact us using the details provided in the “Who are Wimpy UK, and how do I contact them?” section above. 

How long does Wimpy UK keep personal information for this purpose?

We retain personal data to tailor the newsletter we send for as long as we have your consent to sending email marketing to you (see “How does Wimpy UK use my personal information to tailor the newsletter that it sends me?” above).

How does Wimpy UK use my personal information to allow me to take part in a competition (where I have entered it)?

We use personal data to enter you into a competition, let you know if you win it, and to send your prize to you.

What personal information is used to allow me to take part in a competition?

We will use the personal information you give us / we request on the competition sign up form.

Competition entries will typically include your name, email address, phone number and postal address.

It may sometimes request your date of birth or age where the competition is only open to certain age groups.

Where does Wimpy UK obtain my personal information from in relation to competitions?

Wimpy UK obtains all of the personal information it uses for the purpose of the competition from the competition entry form that you completed.

What is Wimpy UK’s legal justification for using my personal information to enter me into a competition?

Wimpy UK uses your personal information as it is necessary for the performance of a contract between you and us (your entry into the competition).

Without this personal information, we would not be able to accept your competition entry.

Who does Wimpy UK share this personal information with?

Where the competition is run in partnership with another brand and you win, we may provide your personal information to that brand so that they can notify you about winning and send you your prize.

Otherwise we will only share your personal information for this purpose with organisations that provide a service to us, and they only use or store your personal information on our instructions.

What should I do if I want Wimpy UK to stop using my personal information to enter me into a competition?

If you would like us to stop processing your personal information in this way, please contact us using the details contained in the “Who are Wimpy UK, and how do I contact them” above.

However please note that if you do so we will have to withdraw your entry into the competition, as this personal information is necessary for us to enter you into it.

How long does Wimpy UK keep personal information for this purpose?

We keep competition entries for up to one year from the date of the draw, but may keep certain personal data for the purposes of monitoring trends and detecting fraud (see below).

How does Wimpy UK use my personal information to monitor trends and detect fraudulent competition entries?

We use some personal data from competition entries to monitor trends and to detect fraudulent competition entries.

What personal information is used to allow me to monitor trends and detect fraudulent competition entries?

We use your name and postcode.

Where does Wimpy UK obtain my personal information from in relation to competitions?

Wimpy UK obtains this personal information from the competition entry form.

What is Wimpy UK’s legal justification for using my personal information to monitor trends and detect fraudulent competition entries?

Our legal justification for monitoring trends and detecting fraudulent competition entries is our legitimate interest in doing so.

Who does Wimpy UK share this personal information with?

We will only share your personal information for this purpose with organisations that provide a service to us, and they only use or store your personal information on our instructions.

What should I do if I want Wimpy UK to stop using my personal information to monitor trends and detect fraudulent competition entries?

If you would like us to stop processing your personal information in this way, please contact us using the details contained in the “Who are Wimpy UK, and how do I contact them” above.

How long does Wimpy UK keep personal information for this purpose?

We keep personal data for this purpose for 2 years.

How does Wimpy UK use personal information to tailor the display advertising other websites show me?

• What personal information does Wimpy UK use to tailor the display advertising other websites show me?

Wimpy UK uses advertising platforms such as Facebook to display adverts to you, and uses you age, location, group memberships and interests to target those adverts to you.

Where does Wimpy UK obtain the personal information it uses t to tailor the display advertising other websites show me?

Wimpy UK does not have access to this personal information – the advertising platforms simply make available tools allowing us to make use of it. 

The advertising platform will typically collect this personal information from you, or create it about you (e.g. when you join a group).

What is Wimpy UK’s legal justification for using my personal information to tailor the display advertising other websites show me?

Our legal justification for tailoring advertising that other websites show you is our legitimate interest in personalising your experience with Wimpy UK, therefore improving the click rates on our adverts to improve our return on investment.

Who does Wimpy UK share personal information with for this purpose?

Wimpy UK does not have access to this personal information, and therefore cannot share it.

What should I do if I want Wimpy UK to stop tailoring the display advertising other websites show me?

As we rely on legitimate interests as our legal justification, you have the right to object to us processing your personal information in this way.

To object, please contact us using the details provided in the “Who are Wimpy UK, and how do I contact them?” section above. 

You can also opt-out of targeted advertising generally by amending your privacy settings on the relevant advertising platform (e.g. Facebook).

How long does Wimpy UK keep personal information for this purpose?

Wimpy UK does not have access to this personal information.

How does Wimpy UK use personal information to share my content on its social media platforms?

What personal information does Wimpy UK use to find my social media post/s?

Wimpy UK does not use personal information to find the posts. We search for the # or where we are tagged.  We use software to find content relating to Wimpy UK which could then be shared on our various social media platforms.

Where does Wimpy UK obtain the personal information it uses to find my social media post/s?

Wimpy UK does not have access to this personal information. The software used simply targets relevant search terms, such as our branded hashtag #WimpyMoment and/or our branded tags @WimpyUK @WimpyRestaurants to find content related to us.

If you use our branded hashtag or tag us in your public post, we may re-post this on one, or all, of our national profiles and/or Stories. If we do, we will always credit your image with your handle or username.

If you post about Wimpy UK but do not tag us, or use one of our brand or campaign hashtags, we will Direct Message you to obtain your consent before we re-post.

What is Wimpy UK’s legal justification for using my personal information to find my social media post/s?

Wimpy UK does not have access to this personal information. We have a legitimate interest in sharing user generated content concerning our brand with other social media users to boost brand awareness.

Who does Wimpy UK share personal information with for this purpose?

Wimpy UK does not have access to this personal information, and therefore cannot share it.

What should I do if I want Wimpy UK to stop sharing my content on their social media platforms?

To object, please Direct Message us from within the relevant social media platform. We aim to remove any unwanted re-posts from our profiles within 48 hours.

To ensure only those people you want can see your posts, you can also review and change your privacy settings in the relevant platform.

How long does Wimpy UK keep personal information for this purpose?

Wimpy UK does not hold, or have access to, your social media based personal information.

How does Wimpy UK use personal information to remember my location on the “Find your Wimpy” page of its website?

What personal information does Wimpy UK use to remember my location on the “Find your Wimpy” page of its website?

We only store the closest Wimpy restaurant to the postcode or location you previously searched.

However, we do not store this personal information on our servers – it is stored on your device using a cookie.

Where does Wimpy UK obtain the personal information it uses to remember my location on the “Find your Wimpy” page of its website?

When you type in your location we will remember your location for next time you visit.

What is Wimpy UK’s legal justification for using my personal information to remember my location on the “Find your Wimpy” page of its website?

Where we do process personal information on our servers, which is in most circumstances unlikely, our legal justification is our legitimate interest in making it as easy as possible for you to find your nearest Wimpy restaurant next time you visit our website.

Who does Wimpy UK share this personal information with?

We do not share this personal information with anyone.

What should I do if I want Wimpy UK to stop using my personal information to remember my location on the “Find your Wimpy” page of its website?

You can stop us from using your personal information to remember your location on the “Find Your Wimpy” page by deleting the cookies from your browser. For instructions how to do this, please see your browser help pages.

How long does Wimpy UK keep personal information for this purpose?

The cookie used to store your nearest wimpy is set to expire after 28 days.

How does Wimpy UK use personal information to handle queries and complaints that I send it?

What personal information does Wimpy UK use to handle queries and complaints?

We use your name, email address, telephone number, address, the details of your complaint or query, and any correspondence between you and Wimpy UK.

On occasion, we may generate additional personal information, for instance a report on our investigation into your complaint.

Where does Wimpy UK obtain the personal information it uses to handle queries and complaints?

We will obtain most of this information from you directly, but on occasion we or our external advisors may create it (e.g. when a report is written documenting the findings of an investigation).

What is Wimpy UK’s legal justification for using my personal information to handle queries and complaints?

Our legal justification is our legitimate interest in responding to your query or addressing your complaint.

Who does Wimpy UK share this personal information with?

We may share personal data with our external advisors to the extent we need to in order for them to provide their services.

We may also share your personal information with a Wimpy restaurant owner where the complaint is about their restaurant.

What should I do if I want Wimpy UK to stop using my personal information to handle complaints and queries?

If you would like us to stop processing your personal information in this way, please contact us using the details contained in the “Who are Wimpy UK, and how do I contact them” above.

However please note that if you do so we may be unable to respond to your query or address your complaint.

How long does Wimpy UK keep personal information for this purpose?

We retain personal data relating to queries and complaints for 12 months, unless we believe it is likely to develop into a legal claim (see “How does Wimpy UK use personal information to bring or defend legal claims?” below).

How does Wimpy UK use personal information to bring or defend legal claims?

What personal information does Wimpy UK use to bring or defend legal claims?

We may use any of the personal information we hold about you, but this will typically include your name, contact details, correspondence between you and us, and details of any complaints you have made.

We may generate additional personal information, for instance where we have obtained legal advice or written report documenting our investigation into the merits of a claim.

Where does Wimpy UK obtain the personal information it uses to bring or defend legal claims?

We will obtain most of this information from you directly, but on occasion we or our external advisors may create it (e.g. when a report is written documenting the findings of an investigation).

What is Wimpy UK’s legal justification for using my personal information to bring or defend legal claims?

Our legal justification is our legitimate interest in bringing and/or defending legal claims.

Who does Wimpy UK share this personal information with?

We may share personal data with our external advisors to the extent we need to in order for them to provide their services.

We may also share your personal information with a Wimpy restaurant owner where the claim relates to their restaurant.

What should I do if I want Wimpy UK to stop using my personal information to bring or defend legal claims?

Whilst you always have the right to raise an objection to processing of your personal information where we rely on legitimate interests as our legal obligation (which you can do using the contact details contained in the “Who are Wimpy UK, and how do I contact them” above), we are entitled to refuse to honour your objection where the processing is necessary for us to bring or defend a legal claim.

How long does Wimpy UK keep personal information for this purpose?

We retain personal data for to bring and defend legal claims for five years.

Who does Wimpy UK share personal information with?

Internally, Wimpy UK only grants access to personal data to those people that need access to that data to carry out their role.

Externally, Wimpy UK may share personal data with third parties for specific purposes, as set out in the sections above. It may also from time to time share personal data with the following categories of recipients:

  • its service providers, for instance:
    • the companies that manage our IT infrastructure;
    • companies that provide us with cloud based IT systems, such as our CRM system; and
    • its external advisors, for instance marketing agencies, IT consultants, accountants and lawyers.

Where we share personal data with service providers we will always ensure that the service provider is committed contractually to only use personal data in compliance with Wimpy UK’s instructions and data protection law;

  • its regulators, law enforcement and other government authorities, where they require us to do so; and
  • potential buyers of or investors in our business where necessary in connection with a due diligence exercise.

Which countries will my personal information go to? 

Most of the time, we keep your personal information within the United Kingdom and countries that share the same law that protects your personal information. 

However sometimes, where our suppliers are not based in that area, your personal information may be stored in or accessed from outside of that area. 

Where it is, we’ll only allow that if there is a good reason and we will always ensure we either have required the supplier to meet the same standards we do, or that we have done so only as we are allowed to under data protection law.

When we share your data with our South African creative agency or parent company, your personal information will be transferred to South Africa. We have model contract clauses in place with both our marketing agency and parent company which have been approved by the EU Commission as providing equivalent protection to your personal information.

We can provide more information on the countries to which we transfer your personal information on request.

What rights do I have over my personal information?

The law gives you certain rights in respect of the information we hold about you. 

To use any of these rights, please contact Wimpy UK using the details provided in the section called “Who are Wimpy UK, and how do I contact them?” above. 

Where you are asking us to stop sending you marketing, the easiest way to do that is to follow the instructions contained within the email or text you received from us.

  • The right to receive a copy of your personal information
    You have the right to ask Wimpy UK to give you a copy of the personal information it holds about you.

    Your first request will be free, but we may charge you for additional copies of the same personal information.

    Where the personal information is data that you have given to us electronically you might be able to require us to provide you or another person a copy electronically in a commonly used electronic format

  • The right to have your personally information corrected
    If we hold personal information about you that is not true, you can require us to fix it (although you cannot require us to change our opinion).

  • The right to have your data deleted
    Where we do not have a valid reason for holding your personal information, you can require us to delete it.
  • The right to stop Wimpy UK from sending marketing emails and texts to youYou can require Wimpy UK to stop sending you marketing emails and texts to you at any time.The easiest way to do this is to follow the “unsubscribe” instructions contained in each email or text you receive from Wimpy UK.

  • The right to stop Wimpy UK using your personal information where its legal justification is its legitimate interests
    Where Wimpy UK’s legal justification for using your personal information is its legitimate interests (please see the “How does Wimpy UK use my personal information?” section above), you can ask us to stop using your personal information for that reason, but Wimpy UK may be able to say no if it believes that its legitimate interest is very important and there is not much impact on you.

  • The right to require Wimpy UK to temporarily stop using your personal information in a particular way
    You can require Wimpy UK to stop using your personal information temporarily where you have made another request which we have not made a decision on.
    For example, this right will apply if you ask us to correct your personal information but we have not yet decided whether we agree that it is not true.

  • The right to withdraw your consent
    Where Wimpy UK’s legal justification for using your personal information is consent (please see the “How does Wimpy UK’s use my personal information?” section above), you can tell us to stop using your personal information in that way.

    However, Wimpy UK may be able to continue to use that personal information in other ways where our legal justification is not consent.

Who can I contact if I am unhappy about the way Wimpy UK has used my personal information?

We ask that you contact us first using the details provided in the section called “Who are Wimpy UK, and how do I contact them?” above but you are not required to.

If you do not want to contact us first, or you have and we have not handled your concern properly, the Information Commissioner’s Office (ICO) is responsible for ensuring Wimpy UK and other organisations process personal information in the right way and you have the right to make a complaint to them about how Wimpy UK has handled your personal information. 

You can make a complaint to the ICO via their website (https://ico.org.uk/concerns/) or by calling their helpline (0303 123 1113).

How and when will this policy be updated?

We may change this privacy statement from time to time. When we do, we’ll publish those changes on this same page, and if the way in which we process your personal information changes significantly, for instance because we start using personal information in a completely new way, we will try to contact you using an email address we hold for you, if any.

This page was last updated on 3 July 2023.