Privacy notice
The short version: the only personal data collected here is what you type into the enquiry form, it is used to answer your enquiry, and it is not sold, shared or fed to an advertising network. There are no advertising cookies and no tracking pixels, and analytics runs only if you allow it.
Who is responsible for your data
Menu Engineering Co., operated by Ryan Purrington, is the data controller for personal data collected through this website. You can reach the controller at menuengineering@outlook.com or by post at Suite RA01, 195-197 Wood Street, London, E17 3NU.
What is collected, and why
| Data | Why it is collected | Lawful basis |
|---|---|---|
| Name | To reply to you properly | Legitimate interests |
| Email address | To send the reply | Legitimate interests |
| Business name and phone number | Optional. To understand the operation and call you if you prefer | Legitimate interests |
| Your message | To answer the question you actually asked | Legitimate interests |
| Server logs | Kept by the hosting provider for security and fault diagnosis | Legitimate interests |
The legitimate interest is responding to a business enquiry you chose to send. You are not added to a mailing list as a result of enquiring, and there is no marketing list on this site to be added to.
Commercial data shared during an engagement
This matters more than the website form. Menu audits involve sales mix exports, recipe specifications, invoices and gross profit figures. That information is commercially sensitive and is treated accordingly:
- It is used only for the engagement it was supplied for.
- It is never shared with another client, named in a case study, or published in any form without written permission.
- Case study figures are published only where the client has signed them off, and are withheld and described as withheld where they have not.
- A mutual non disclosure agreement can be put in place before any data changes hands. Ask, and it will be sent.
Cookies and tracking
This site uses Google Analytics to count visits and see which pages get read. Nothing here is used for advertising, and there are no social media tracking pixels.
Analytics is off until you allow it. The tag loads with storage denied, so no analytics cookie is set and no identifier is stored unless you choose Allow on the notice that appears on your first visit. Choosing Decline leaves it off, and that choice is remembered in your browser rather than sent anywhere. You can change your mind by clearing this site's data in your browser, which removes the stored choice and brings the notice back.
Advertising storage and personalisation are denied permanently and are not offered as a choice, because this site does not advertise.
The calculators run entirely in your browser. The figures you enter are never transmitted anywhere and are gone when you close the tab.
Web fonts are served by Google Fonts, which means your browser makes a request to a Google server and Google will see your IP address as part of that request. If you would rather avoid that, the fonts can be self hosted instead. Say so and it will be changed.
How long it is kept
- Enquiries that do not become work: deleted after twelve months.
- Client records and correspondence: kept for six years after the engagement ends, which is the period required for tax and accounting records.
- Commercial data supplied for an audit: returned or deleted on request at any point, and deleted by default twelve months after the engagement closes.
Your rights
Under UK GDPR you can ask for a copy of the personal data held about you, ask for it to be corrected or deleted, object to it being processed, or ask for processing to be restricted. Requests are answered within one calendar month, and there is no charge.
To make a request, email menuengineering@outlook.com.
If you are not satisfied with the response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You are entitled to complain to the ICO without raising it here first, though it is usually quicker to ask directly.
Processors
A small number of third parties handle data on this business's behalf. They are bound by contract to process it only on instruction.
- Cloudflare, Inc., for hosting and delivering this website securely, and for its server logs.
- Microsoft Corporation, for correspondence, which is handled through Outlook.
- Google LLC, for website analytics, and only once you have allowed it.
- No third party handles the enquiry form. Submissions are composed as an email in your own browser and sent to the address above, so nothing passes through a form service.
- Accountancy and bookkeeping, for invoicing and statutory records.
Transfers outside the UK
Cloudflare, Google and Microsoft are based in the United States and process data in more than one country. Where personal data is transferred outside the UK, it relies on a safeguard recognised under UK data protection law, which depends on the provider and is set out in their own privacy documentation. Ask, and the detail for any provider will be sent.
Changes
How the work itself is engaged is set out in the terms of service.
This notice was last updated 31 October 2026. If it changes materially, the date changes with it.
Questions about any of this?
Ask directly. Requests about your data are answered properly rather than routed through a form.