Privacy Notice
DishMark is a trading name and division of Maynard Procurement Solutions Ltd. Version 2026-06-v2, last updated June 2026. These are business-to-business terms.
1. Controller
Maynard Procurement Solutions Ltd, trading as DishMark, P O Box 8, Wilmslow, Cheshire SK9 5ES (Company Registration No. 08753201, VAT No. GB174 691576), is the data controller for personal data processed through the DishMark platform.
2. What we collect
Account details (name, login email, organisation, role); billing contact details, company address and VAT number for invoicing; report-recipient email addresses you supply; payment confirmation references from Stripe or PayPal (we do not store full card numbers); and technical data such as login times and IP addresses for security.
3. Why we process it
To provide the service and portal; to take payment and issue VAT invoices (legal obligation and contract); to deliver reports to authorised recipients; to secure accounts and prevent abuse (legitimate interests); and to communicate service notices.
4. Establishment data
Reports contain information about food and drink businesses drawn from publicly available menus and approved data providers. Where a sole trader's name forms part of a business name this may constitute personal data; we process it on the basis of legitimate interests in producing market intelligence and honour objection requests.
5. Sharing
Payment processing is performed by Stripe. Reports are shared only with recipients you authorise or via share links you create. We use hosting and email providers as processors under contract. We do not sell personal data.
6. Retention
Reports and derived observations are retained for 24 months (or the period of your plan); raw evidence for up to 90 days or the shorter source limit; invoices and payment records for 6 years to meet HMRC requirements; operational logs for 30 days.
7. Your rights
You may access, correct, export or request deletion of your personal data, and object to or restrict processing, by contacting us using the billing email shown on our invoices. You may complain to the Information Commissioner's Office (ico.org.uk).
8. Security
Passwords are stored as salted hashes; sessions use httpOnly cookies; access is role-based and organisation-scoped. Payment card details never touch our servers.