Privacy policy

Template text for review by the operator's legal adviser before go-live.

What we collect

To fulfil your order we collect your name, phone number, optional email, delivery address (for delivery orders), the contents of your order and notes you add. Card details are entered on Stripe and never reach our servers.

Why and on what basis (UK GDPR)

We use this data to take, prepare, deliver and refund your order (performance of a contract), to keep financial records (legal obligation) and to prevent fraud and abuse (legitimate interests). We do not send marketing messages without your consent.

Who sees it

The restaurant you order from, its staff and delivery drivers, and our processors: Supabase (database hosting), Vercel (application hosting) and Stripe (payments). Your postcode is checked against postcodes.io to calculate delivery distance.

How long we keep it

Order records are kept for 6 years for tax and accounting purposes, then deleted.

Your rights

You can ask the restaurant for access to, correction of or deletion of your data, and you can complain to the Information Commissioner's Office (ico.org.uk).