UK GDPR Compliance & Consent Charter
At ZingoDine and Newotion IT Solutions LTD, compliance with data protection laws is built directly into our software engineering life-cycle.
1. Data Processing Addendum (DPA)
When restaurants utilize ZingoDine to handle guest diner orders, reservations, and loyalty customer profiles, the restaurant acts as the Data Controller, and Newotion IT Solutions LTD acts as the Data Processor. We process diner personal data strictly in accordance with documented instructions from the restaurant controller.
2. Digital Consent & Agreement Ledger
In accordance with GDPR accountability principles (Article 5(2)), our platform maintains an immutable electronic audit ledger that records:
- Signatory Name and verified Email Address
- Contract and Document Version agreed to (e.g. Terms v1.0, Privacy v1.0)
- Precise UTC Timestamp of agreement
- Client IP Address and Browser User-Agent verification fingerprint
This immutable ledger ensures unambiguous, legally verified consent records for all merchant subscribers, agency partners, and system users.
3. Data Portability & Right to Erasure
Subscribers and users may request full data export files in machine-readable JSON or CSV format at any time. When a legitimate right-to-erasure request is submitted, all non-statutory records are securely sanitized and permanently wiped across our primary databases and backup arrays.
4. Sub-Processor Registry
We partner only with industry-leading, ISO 27001 and SOC 2 Type II certified sub-processors including Amazon Web Services (AWS eu-west-2 London), Stripe Payments Europe Ltd, and GlobalPayments UK.