Privacy notice

Last updated 28 October 2026

This notice explains what personal information WPA Fire & Security Consultants Ltd ("we") collects when you use Let's Do Lunch, why, and your rights. We are the data controller. You can contact us about anything here at office@letsdolunchhq.com.

What we collect

• Account details: your name, job title, company, work email address and a securely scrambled version of your password.
• Profile details: what you buy or supply, regions, contract values, accreditations, and, if you're a buyer, the renewal date of your current contract.
• Verification results: whether your job title, your listing as a company officer on the public Companies House register, and your email domain matched what you told us, plus our team's review.
• Activity: who you have shown interest in or passed on, your matches, lunches booked, the outcomes you record, companies you block or prefer, and any problems you report.
• Payment records if you subscribe. Card details are handled by our payment provider, Stripe; we never see or store them.
• Website registrations: the details you give when you register interest before launch.
• Technical information: one essential cookie that keeps you signed in, and standard server logs such as IP addresses, kept for security.

Why we use it, and our legal basis

• To run the service you signed up for: building your profile, matching, unlocking contact details when a match is mutual, booking lunches and sending meeting briefs. Basis: contract.
• To verify that members are genuine decision-makers and keep the platform safe, including handling reported problems. Basis: legitimate interests.
• To take payment and keep financial records. Basis: contract and legal obligation.
• To email you about the launch if you registered interest on our website. Basis: consent, which you can withdraw at any time.

Who can see your information

• Other members see only an anonymous version of your profile: no name, company, logo or contact details. Your name, job title, company, work email and office location are shared with another member only when you have both said you're interested.
• Your renewal date is never shown to anyone. We use it only to decide when to show you to relevant suppliers.
• Companies you block, and their group companies, never see you, and they aren't told.
• Service providers who process data for us under contract: our hosting provider, our email provider, Stripe for payments, and Companies House for register lookups.

We don't sell your information or share it for advertising.

Where it's kept and for how long

Your information is stored with our hosting provider in the UK or European Economic Area. We keep it while your account is open. When you delete your account, your account, profile, matches and lunches are deleted straight away and drop out of our rolling backups within 14 days. We keep payment records for six years because the law requires it. Website registrations are kept until launch plus 12 months, unless you ask us to remove them sooner.

Your rights

You can ask to see, correct, delete or move your information, or object to how we use it. You can do most of this yourself:

• See and download everything we hold about you: Account › Download my data.
• Correct your profile: Account › Edit profile.
• Delete your account: Account › Delete my account.

For anything else, contact office@letsdolunchhq.com. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use one cookie, which keeps you signed in. It's essential for the service to work, so we don't ask for consent. We don't use advertising or tracking cookies. Our pages load fonts from Google Fonts, which receives your IP address when the fonts download.

Changes

If we make important changes to this notice, we'll tell members by email before they take effect.