PRIVACY STATEMENT

Privacy Statement

United Kingdom

Last updated: May 2026

1. Data Controller

Morley's (Fast Foods) Limited (Morley’s) is the data controller for the processing of your personal information.

2. Scope of this UK Privacy Statement

This UK Privacy Statement supplements the Morley's is intended to provide additional information about how Morley's uses your personal information in connection with online and in-store services that Morley's makes available in the United Kingdom (including in respect of Morley's website, delivery and loyalty app, social media pages, email newsletters, in-store ordering screens and drive-through windows) and any other personal information collected by Morley's which we receive from third parties such as delivery operators who share your personal information with us when you consent to receiving our marketing communications.

3. Your Personal Information Rights

You have certain rights in relation to the personal information we hold about you. In connection with these rights, you may:

Withdraw this consent at any time, where we rely on your consent as a basis for processing your personal information. The withdrawal of the consent shall not affect the lawfulness of the processing that took place based on your consent before its withdrawal;

Request access to your personal information and obtain a copy of it;

Obtain your personal information in a structured, commonly used and machine-readable format and request us to transmit it directly to another company in case your personal information is processed based on your prior consent, or required for the performance of a contract;

Have your personal information corrected when it is inaccurate or incomplete;

Object on grounds relating to your particular situation to our processing of your personal information based on our legitimate business interest, including profiling, and to the sending of marketing communications;

Have your personal information erased, including any links to, copy or replication of such information, in certain circumstances, such as where we no longer need it or if you withdraw your consent (where applicable); and

Obtain the restriction of the processing while we are processing your request or challenge the accuracy of your personal information or the lawfulness of the processing of your personal information and our legitimate interests to process this information, or if you need the personal information for litigation purposes.

You may exercise these rights free of charge by submitting a request via our Privacy Rights Centre which can be accessed by clicking here. However, we may charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive, for example if the same request is made repetitively. In some situations, Morley's may refuse to act or impose limitations on the information disclosed if, for instance, the disclosure is likely to adversely affect the rights and freedoms of others, prejudice the execution or enforcement of the law, or interfere with pending or future litigation.

You also have the right to lodge a complaint about our processing of your personal information with the Information Commissioner's Office, which is the Supervisory Authority in the UK. Contact details are as follows: https://ico.org.uk/concerns/ or 0303 123 1113.

4. Children’s Privacy

We do not intend to process personal information about any child unless data is needed for a specific activity of which their parent or legal guardian is fully aware.

Please note, children’s personal information may also be processed by us:

in exceptional circumstances, for example in the case of an emergency occurring in a store; or
incidentally when carrying out the other activities described in this Privacy Statement, for example when a child visits a store they may be recorded by CCTV (for more information, see the CCTV and Body Worn Cameras section below).

5. Cookies and Other Technologies

A copy of Morley's UK cookies policy can be found here.

6. Purposes for which we process your personal information

a) To carry out online advertising

We may share your personal information with third party advertising technology companies (“Advertising Partners”) so that we can advertise to our customers and other people on websites apps and digital properties that are operated by the Advertising Partners or third parties that also work with our Advertising Partners (“Third Party Sites”). Our Advertising Partners include Meta, Snap, Twitter, and Google.

Customer Match Advertising on Third Party Sites

We may share your email address or other identifiers (e.g. your device ID) with our Advertising Partners, so that our Advertising Partners can try to “match” your data with their data or the registration data of Third Party Sites.

Where there is a match, our advertising will be displayed to you when you use the relevant Third Party Site (e.g. on your Facebook newsfeed). This is known as “custom audience” advertising, because we “customise” the audience that we want to reach on other online services.

We may also share your personal information with Advertising Partners in order to exclude you from seeing our advertising (because we are trying to reach people that are not yet our customers).

We will only do this activity where we have appropriate permission (for example, where you have given us permission to track you through your app settings).

Using cookies and similar tracking technologies

We and our Advertising Partners may use cookies and other similar tracking technologies on Morley's online services to recognise you, and to display our advertising to you, when you visit Third Party Sites.

Where your data is collected for these purposes through the use of non-essential cookies and other similar tracking technologies, we rely on consent to collect your personal information and for the onward processing purpose. Please see the “Cookies and Other Technologies” section for more information about the cookies and other similar tracking technologies that we use.

Lookalike Advertising on Third Party Sites

Where we share your personal information with Advertising Partners as described in this section, we may also ask the Advertising Partner to find other people that share similar interests and behaviours to you, and to show our advertising to those people when they use Third Party Sites. We will only share this personal information where we have appropriate permission (for example, where you have given us permission to track you through your app settings).

This is based on personal information that you have provided through your use of Third Party Sites (which may include Third Party Sites of the Advertising Partner). This personal information might include demographic data (such as your age or gender) and interest-based data (things that you like). This personal information is not shared with us.

To the extent we are a controller of this personal information, we consider it is in our legitimate interest to use this personal information in this way to increase the effectiveness of our advertising by displaying our ads on individuals who share similar interests and characteristics to our customer base.

Using tools made available by Advertising Partners

Advertising Partners may provide tools that we can use to deliver our advertisements to people who we think are more likely to be interested in our products and services.

For example, an Advertising Partner may have determined that you are a ‘spicy wings-fan’ using data that they have collected about you through your use of Third Party Sites (which may include Third Party Sites of the Advertising Partner). If we want to display a spicy wings advertisement to a spicy wings-fan, the Advertising Partners that we work with may allow us to show our advertisement to you using selection tools that they make available. The personal information that is used for this is not shared with us.

To the extent we are a controller of this personal information, we consider it is in our legitimate interest to use this personal information in this way to ensure our advertising is relevant to those receiving it.

Measuring the effectiveness of our online advertising

We and the Advertising Partners that we work with may use your personal information, and cookies and other similar tracking technologies on Morley's online services, to measure the effectiveness of our advertising. Where we use personal information collected through the use of cookies to measure the effectiveness of our advertising for these purposes, we rely on consent to collect your personal information and for the onward processing purpose. Otherwise, where we use personal information for these purposes, it is in our legitimate interest to use your personal information in such a way to inform our advertising strategy.

Please see the “Cookies and Other Technologies” section for more information about the cookies and other similar technologies that we use.

In addition, when you see our advertisements on Third Party Sites, the Third Party Sites and Advertising Partners that we work with may separately collect personal information about your interaction with our advertisements, which is used to provide us with aggregated statistics and reports (which do not contain your personal information) to help to measure the effectiveness of our advertising.

Sometimes the advertising that we show to you may be personalised to you. This means that the advertising is more likely to be relevant and of interest to you. We rely on your consent to personalise advertising to you. Please note, if we do not have your consent for this, you may still see our advertisements on Third Party Sites but they may be about products and services that do not interest you.

For some of the activities referred to in this section, we may be joint controllers with some of our Advertising Partners and the use of your personal information may also be subject to the privacy policies and practices of our Advertising Partners and choices that you have made on Third Party Sites. Please see the “Our Advertising Partners’ Platforms” section below for further information.

b) Our Facebook Page

When you visit our Facebook Page, Facebook Ireland will collect insights data and will process such insights data as described here. Facebook does not share your personal information with us for this purpose, but they may provide us with aggregated statistics about your use of our Facebook Page.

c) CCTV, Body Worn Cameras

CCTV is used in Morley's stores for the following purposes:

To prevent and detect crime, disorder, and misconduct, and to protect Morley's systems, facilities, and property against damage, disruption, vandalism, fraudulent activity, and other crime (including detecting fraudulent use or misuse of customer-facing services, such as Morley's Rewards);
To assist law enforcement in the prevention, investigation, detection, and prosecution of crime;
To provide evidence in the event of legal proceedings issued by or bought against Morley's; and
To assist in day-to-day management of stores and offices, including for health and safety purposes.

In addition, Body Worn Cameras (BWCs) may be used in some Morley's stores in pursuit of the above purposes. BWCs may capture audio and video recordings but are switched off by default – they will only capture recordings when activated by an authorised store crew member in appropriate situations, such as preventing and detecting crime, disorder and misconduct.

Morley's also captures your image if you are using our drive-through, at the time you place an order. This is not permanently saved onto any device. Instead, it is displayed on the cashier’s till in the drive-through window and is then automatically deleted within 30 minutes of the sale being completed. The image captured will generally include only the head and shoulders of the individual making the order and is captured for Morley's legitimate business interests to ensure that the completed food and beverage order is passed to the same person who placed the order.

d) Customer Services

We may monitor, record, store, and use any telephone, email, or other communication with you in order to check any instructions given to us, for training purposes, and to improve the quality of our customer service. It is in our legitimate interests to use your personal information for this purpose.

e) Bringing and defending legal claims – sharing with our insurer

We may share your personal information with our insurance brokers, where necessary to bring or defend legal claims and/or to protect the rights, interests, safety, and security of our organisation, our employees, franchisees, or members of the public. Our insurance broker uses the information in accordance with its privacy notice located at https://www.andrewsco.co.uk/privacy-agreement/. To exercise your rights in relation to their processing of your personal information, please contact Andrews & Co. directly as set out in their privacy notice.

It is in our legitimate interest to bring and defend legal claims and to use your personal information for this purpose.

f) Fraud Detection and Prevention

We may share your personal information with suppliers who help to protect you and Morley's from fraud.

It is in our legitimate interest to ensure that we and you are not subject to fraud and for us to use your information for this purpose.

g) Prize promotions (including competitions, draws and instant win offers)

If you win a major prize through our prize promotions, we may be required, by self-regulatory codes that we are subject to, to publish or make available personal information to demonstrate that a valid award took place. Such information will typically include your surname and the county where you live but may include other personal information relating to the prize promotion. You are entitled to object to us sharing your personal information for this purpose (see ‘How to Contact Morley's UK' below), but we may still provide this to self-regulatory bodies (such as the Advertising Standards Authority) on request.

It is in our legitimate interests to use your personal information in this way to ensure that our prize promotion is administered fairly and effectively, and to ensure that we comply with self-regulatory codes.

h) Morley's Rewards

Morley's Rewards is our points based loyalty scheme, where you can receive bonuses or offers and earn rewards that can be redeemed in certain stores and via the Morley's app. Use of Morley's Rewards is subject to separate Morley's Rewards Terms (UK) (“Reward Terms”). You can find out more about Morley's Rewards here.

When you sign up to Morley's Rewards, we obtain your consent to use your personal information to personalise your Morley's experience. For more information about the personal information that we use, and how we use it to personalise your Morley's experience, including for Morley's Rewards, please see the “Personalising your Morley's experience ” section. You can withdraw your consent by deleting your customer account (see “Closing your Morley's Rewards account” in the Reward Terms).

In addition, we will use your personal information, including your registration data, order history, and details of offers and rewards that you have received and redeemed, to:

administer and manage your Morley's Rewards account, including to respond to any queries that you have in respect of your account; and
monitor compliance with the Reward Terms, and to protect you and us against fraudulent activity, including to detect any suspicious activity concerning your Morley's Rewards account and/or the improper receipt or redemption of points or rewards. See the “Your compliance with the Reward Terms” section of the Reward Terms for further information.
It is in our and your legitimate interests to use your personal information for these purposes, so that we can provide Morley's Rewards to you in an effective manner and to protect you and us against fraudulent activity.

j) Morley's personalised experience

We want to ensure that you have the best possible experience when using Morley's and interacting with us. To do this, we may use your personal information to tailor our products and services to you, including as follows:

Morley's Rewards: If you are signed-up to Morley's Rewards, we will use your personal information to personalise the offers and rewards that you receive. You can find out more about Morley's Rewards here..

Personalising our in-store services: We may provide you with personalised product recommendations when you use our in-store services. We will do this if you are signed-up to Morley's Rewards and if you identify yourself at our ordering screens or at the drive-through (available at select locations only). If you are not signed-up to Morley's Rewards or do not identify yourself as described in this section, we will not personalise our in-store services to you, but you may still receive non-personalised product recommendations which may be of less interest to you.

Personalised marketing: If you receive marketing from us (for example where you have subscribed to receive our email marketing) we may use your personal information to tailor the communications that we send to you. This means that the marketing communications are more likely to be relevant and of interest to you.

To personalise your experience in the manners described above, we use your order history and data relating to your use of our services. This includes analysing your use of the Morley's app (such as pages viewed and products added to your basket), actions that you take in relation to rewards and offers (such as whether you redeem offers), and your interaction with our marketing communications. We do this to learn more about you and to make predictions about your individual preferences. In some cases, the data that we use may be collected using cookies and similar technologies.

We will only personalise your experience in the manners described above with your consent. You may opt out of personalisation at any time (see the “Morley's Rewards” section for details of how to withdraw your consent). Please note, if you opt out of personalisation we will not be able to provide Morley's Rewards to you as this is a personalised service. It will also mean that any marketing communications that you receive (including email marketing that you are subscribed to) may not be tailored to you and may be of less interest to you.

7. Morley's Delivery

If you place a Morley's Delivery order through the Morley's app, your personal information will be shared with our Morley's Delivery partner allocation provider, Nash Delivery Technologies UK Limited (trading as “Nash”), and our delivery partners; Uber Eats UK Limited (trading as “Uber Eats”), Just Eat.co.uk LTD (trading as “Just Eat”) and Stuart Delivery Ltd. (trading as “Stuart”) (“Delivery Allocator and Delivery Providers”)

The Delivery Allocator and Delivery Providers will process your personal information for the following limited purposes in connection with your Morley's Delivery order:

to process and deliver your Morley's Delivery order;
to enable communications between you and the rider delivering your Morley's Delivery order;
for customer support;
for fraud prevention;
to enhance the safety and security of you and the rider delivering your Morley's Delivery order;
to improve and develop Delivery Allocator and Delivery Provider services.
The Delivery Allocator and Delivery Providers are controllers of your personal information for the above purposes, but the Delivery Allocator and Delivery Providers will not process your personal information for purposes other than those that are set out above, including for any marketing purposes.

The personal information that the Delivery Allocator and Delivery Providers use for the above purposes include your name, address, contact details (email address and phone number) and details of your Morley's Delivery order (including the journey of the rider delivering your order). It is necessary to process your personal information for the above purposes to perform a contract with you, or it is otherwise in our or the Delivery Allocator’s and/or Delivery Providers’ legitimate interests to use your personal information in this way, to ensure that Morley's Delivery orders are handled effectively and to ensure the integrity of our and the Delivery Allocator’s and Delivery Providers’ services.

Please see the relevant Privacy Notices for more details about how the Delivery Allocator and Delivery Providers use your personal information for Morley's Delivery purposes. To exercise your rights in relation to the Delivery Allocator and Delivery Providers processing of your personal information, please contact them directly as set out in the Privacy Notices.

Nash Data and Privacy Statement: https://nash.ai/legal/data-protection

Uber Eats Data and Privacy Statement: https://help.uber.com/en-GB/ubereats/restaurants/section/data-and-privacy?nodeId=bb64d33a-0a76-41b0-8a61-6fc755eaabdb&_csid=XqGVVN1Vfzn-Hzp3zII4WA&state=FvpQY0vv7DbGeEmsub20nLpgia9DN55yuilFVzxCqjI%3D&effect=&sm_flow_id=FZZKDozl

Just Eat Data and Privacy Statement: https://www.just-eat.co.uk/privacy-policy

Stuart Data and Privacy Statement: https://help.stuart.com/en/articles/7021439-privacy-policy-gdpr

We will process personal information in relation to your Morley's Delivery order in accordance with the other sections of this Privacy Statement.

8. Advertising Partners

In this section we provide further information about the Advertising Partners’ Platforms that we work with, and how these Advertising Partners use your data, in connection with the activities described in the “To carry out online advertising” section.

a) Meta

We are joint controllers with Facebook Ireland Limited (“Meta”) in respect of some of the activities described in the “To carry out online advertising” section, where these activities involve advertising to you on Facebook.

We and Facebook have entered into Facebook’s Controller Addendum to determine our and Facebook’s respective responsibilities for compliance with data protection obligations in respect of these activities. We are responsible for providing the information set out in the “To carry out online advertising” section. Facebook is responsible for giving effect to your data subject rights (see the “Your rights as a data subject” section) in respect of these activities.

For further information about how we and Facebook use your personal information in connection with these activities, including the legal basis Facebook relies on and the ways to exercise your data subject rights against Facebook, please see Facebook’s Data Policy at https://www.facebook.com/about/privacy .

b) Google

Google has published information about how it uses your personal information in connection with its services. In addition, Google provides further information about how it uses personal information in connection with online advertising in its Privacy Policy. You can also use Google’s Ad Settings to manage your online advertising preferences.

c) Twitter

Twitter has published information about how it uses your personal information in connection with its advertising services, including how you can opt-out of Twitter’s interest-based advertising.

d) Snap

Snap has published information about your advertising and interest preferences when you use their services, including how you can opt-out of audience match (or referred to as customer match) advertising.

9. Artificial Intelligence

Artificial Intelligence (“AI”) is a broad term used for a range of technologies that mimic human thought to solve complex tasks.

We may use AI to assist us in some of our customer services operations, for example, when you contact us via a Virtual Assistant. We may use information such as your name, contact details, location details and information about your order. We use your personal data in this way where we consider it is in our legitimate interests to improve the efficiency of our business and provide a more effective customer service.

Where we use AI to assist us in providing you with effective customer service, we do not use it to make solely automated decisions about you as all our customer service interactions involve human review.

For more information about how we use AI, please contact us using the details set out in section 13 (“How to contact Morley's”) below.

10. Public consultation for planning applications for new Morley's store sites.

If you participate in a public consultation run by one of our partners for a new Morley's store site, we will be joint controllers with our partner of the limited personal data you provide at the consultation (normally your name, email address and response to the consultation). Where Morley's are the controller of this personal data, we either rely on the consent collected by our partner or that it is in Morley's legitimate business interest to seek the opinion of the local community in relation to a new Morley's store to assist with our planning applications.

We will process personal data in relation to public consultations in accordance with other sections of this privacy statement.

11. International Data Transfers

We may transfer your personal information to countries that do not have laws which adequately protect your personal information. In such cases, we take measures (such as standard data protection clauses) to ensure that your personal information receives adequate protection. If you have any questions about these measures or if you want to obtain a copy of the standard contractual clauses we use to safeguard personal information we transfer, please contact us using the contact information provided below.

12. How to Contact Morley's

If you have any questions about how Morley's UK processes your personal data, you can reach us via the following methods:

Email: legal@morleyschicken.com

Post:

2nd Floor, Hygeia House 66 College Road, Harrow, Middlesex, HA1 1BE

Attention: Data Protection Officer

Morley’s (Fast Foods) Limited

2nd Floor, Hygeia House 66 College Road, Harrow, Middlesex, HA1 1BE