Privacy Policy

This Privacy Policy explains what data Misenplace collects, why we collect it, and how we protect it. Our approach is simple: we collect only the data needed to operate the Service and our website, and we work hard to keep your data private and secure.

1. Who we are

Misenplace is operated by Mise En Place Online Ltd, a company registered in England and Wales (company number 11491528), with its registered office at SIU Offices, 4-6 Greatorex Street, London E1 5NF, United Kingdom.

You can contact us about anything in this policy at support@misenplace.ai.

This policy covers two things:

• Our website (misenplace.ai), including our forms, the public Market Pulse page and analytics. For this data, we are the data controller.
• The Misenplace platform (app.misenplace.ai), where businesses manage their operations, data, connected systems and users. For the business data customers put into the platform, the customer is the controller and we act as their processor, under our data processing terms, which apply to every platform account, paid or not. This policy explains that processing in plain terms; those terms govern it.

2. What data we collect

If you visit our website or use our forms:

• Contact and business details you give us through our forms and bookings, for example when you book a demo or a call, sign up for Market Pulse, or try the free invoice report (including the files you upload). If you book a call, our scheduling provider also collects your meeting preferences.
• Usage data via analytics tools: pages visited, approximate location, device and browser information. See section 10 (Cookies).

If you have a Misenplace account:

• Account information: name, email address, business name and login credentials, and details you give us during sign-up and onboarding.
• Business data you put into or import to the platform, receive through connected systems (our access to which is read-only unless your contract expressly says otherwise), or that the platform creates for you.
• Payment details are collected and processed by our payment provider. We do not store card numbers.

Documents we access may occasionally contain personal information, for example a contact name or email printed on an invoice. We do not use or enrich those personal details; the Service is built on the product information in your line items.

3. How we use your data

We use your data to:

• Operate, maintain, secure and improve the Service.
• Process your business data and generate reports and insights for you.
• Respond to enquiries, provide support and manage your account.
• Send you what you have signed up for, such as Market Pulse updates, plus occasional news about the product. You can unsubscribe at any time.
• Understand how our website is used so we can improve it.

Our lawful bases are: performance of a contract (running your account and the Service), legitimate interests (improving the Service, securing the platform, responding to business enquiries, and relevant business-to-business communications where permitted by law), consent (marketing communications where consent is required, and non-essential cookies), and legal obligation (records we must keep, for example for tax).

We do not sell your data. We do not share your identifiable data with other customers or third parties for their own purposes, unless you ask us to or agree to it, for example if you ask us to connect you with a supplier.

4. Market Pulse and aggregated market data

Market Pulse is our view of the food and beverage market, built by combining and aggregating data from multiple sources, including purchasing data contributed through Misenplace. The public Market Pulse page on our website shows market-level trends that anyone can view. Inside the platform, the level of Market Pulse access available to an account may depend on its contribution to the dataset.

• Purchasing data used to build Market Pulse is anonymised and aggregated before market-level insights are published.
• We only publish a data point when there is enough data that no individual business or supplier, or their purchasing, can be identified or singled out. Where data is thin, whether because there are few contributors or few suppliers, we show ranges rather than individual points, or nothing at all.
• We never share operator-level purchasing or comparisons with suppliers.

If you would prefer that your data is not used to contribute to Market Pulse, contact support@misenplace.ai and we will exclude it from future contributions. Opting out may restrict access to Market Pulse or certain Market Pulse insights.

5. Improving the Service

We may use aggregated data that can no longer be linked to you or your business to improve the accuracy, matching and analytics that power the Service. We never sell your data, share it with data brokers, or send it to third parties to build profiles about you or your business.

6. Who we share data with

We rely on a small number of trusted service providers to run Misenplace, all under contracts that require them to protect your data and prohibit them from using it for their own purposes. They fall into these categories:

• Cloud hosting and AI processing infrastructure that powers the platform.
• Payment processing (our payment provider handles card details; we never see them).
• Email delivery for reports and account emails.
• Website tools such as our call scheduling widget and analytics.

We may also share data where the law requires it, or as part of a corporate transaction such as a merger or acquisition, in which case this policy will continue to apply to your data.

A current list of the subprocessors that handle platform data is maintained in the Customer Agreement; platform customers are notified before we add or replace one of those.

7. International transfers

We are a UK company. Some of our service providers process data outside the UK, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards, including the UK International Data Transfer Addendum and EU Standard Contractual Clauses entered into with those providers, so your data receives the same level of protection wherever it is processed.

8. Retention

• Account and platform data: kept for as long as you have an account. If you stop using the Service, you may request an export of your data within 60 days. After that we delete it, though residual copies may persist in backups for a limited period before being fully removed, unless the law requires us to keep it. Closing your account deletes your identifiable data; anonymised, aggregated market data already built from past contributions is no longer linked to you and is not reversed.
• Free invoice report (non-customers): we process the invoices you upload to produce your report, keep the uploaded files for up to 3 months, and then delete them.
• Enquiry and marketing data: kept while we have an active relationship with you, and deleted on request.
• Anonymised, aggregated market data is not personal data and may be retained indefinitely.

9. Security

Your data is stored securely using industry-standard practices designed to protect against unauthorised access, loss or misuse, including encryption in transit and at rest, access controls limiting customer data to authorised Misenplace personnel who need it, and regular backups. No system is completely secure, but we continuously work to improve the security of the Service.

If we become aware of a security breach affecting data we process on your behalf, we will notify you without undue delay so you can meet your own obligations under data protection law.

10. Cookies

Our website uses:

• Essential cookies needed for the site and forms to work.
• Analytics cookies to understand how the site is used.
• Third-party cookies set by embedded tools, such as the call scheduling widget on our booking page.

You can control cookies through your browser settings.

11. Your rights

You have the right to access, correct, delete, restrict or object to our processing of your personal data, and to data portability. Contact support@misenplace.ai and we will respond within one month.

Because the platform primarily processes business data on behalf of our customers, some requests may need to be handled by the business that uploaded the data; we will help route your request.

You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

12. Changes to this policy

We may update this Privacy Policy as the Service evolves. If changes are significant, we will make reasonable efforts to notify you. The latest version always lives at misenplace.ai/legal/privacy-policy.

13. Governing law

This Privacy Policy is governed by the laws of England and Wales.