Privacy

What is stored

Your account. Your name and mobile number (and an email address if you gave one), and the delivery addresses you save - each with the flat, landmark and the spot you pinned on the map. You sign in with a one-time code; there is no password to store.

Your orders. What you ordered and how you customised it, the delivery address and contact number for that order, any note you left for the kitchen, when each stage happened, and whether the payment succeeded. Orders are kept after they are delivered: they are the receipt, and the record the kitchen works from if you query a charge.

Your preferences. Dietary and spice preferences if you set them, and whether you want marketing messages.

Not your card. Card numbers are typed into the payment provider's own form and never reach this site or the restaurant. What is stored here is the provider's reference for the payment and whether it went through.

Who else sees it

Only the parties who have to, and only the part they need.

• The kitchen. Staff at the branch cooking your order see the order, the address and the contact number. Staff of other branches and other restaurants do not.
• The payment provider. Your card details go to them directly, along with the amount and an order reference.
• The delivery partner and its rider, for a delivery order. They are given your name, the delivery address with the pinned spot, your phone number, the order number, the number of packages and any instructions you left - because that is what it takes to hand food to somebody - and the order value, used only to settle a claim. A collection order involves no rider.
• A mapping provider (Google Maps), when you search for an address, use your current location, or a delivery is priced. The text you type, or the position your phone reports when you tap "Use my current location", is sent to find the address and the route from the branch - which is what makes the delivery charge for your address, rather than a flat guess, possible. Your position is read only when you tap that button, never in the background.
• A notification service, if you allow order notifications. It holds a device token, not your name.

Your information is not sold, and it is not handed to anybody for advertising.

Marketing messages, and how to stop them

A new account starts opted in. That is worth saying plainly rather than leaving you to discover it: this platform treats marketing as opt-OUT, so unless you turn it off you may receive occasional offers about this restaurant.

Turning it off takes one switch on your preferences page, and it takes effect immediately. Replying STOP to a message does the same thing, and it opts out every account on that phone number rather than just the one the message went to.

Notifications about an order you placed — accepted, on its way, delivered — are not marketing and are not covered by that switch. They are part of the order.

If you use the chat assistant

Where this site offers an assistant, your side of the conversation is kept briefly so it can follow what you are talking about across a few messages, and it expires on its own. It answers from this branch's live menu. Don't type anything into it you would not want stored — it is a menu assistant, not a private channel.

What is kept in your browser

The sign-in token that keeps you signed in, the branch you chose, your cart before you pay, and whether you prefer the light or dark theme. None of it is advertising, and none of it is shared with anybody — it is how the site remembers what you were doing.

What you can change

• Your name, phone number and saved address — on your account page.
• Marketing consent and food preferences — on your preferences page.
• Anything else, including a copy of what is held about you or a request to close your account — ask the kitchen. The phone number is on the contact page.

Closing an account does not delete past orders. They are the restaurant's business records of a transaction that happened, and they are kept as such.

Keeping it safe

Connections to this site are encrypted. Sign-in codes expire quickly and work once. Sign-ins can be revoked, and are revoked automatically when an account is deactivated.

No system is beyond reach. If you think your account has been used by somebody else, tell the kitchen, and never share a sign-in code with anyone.

Changes to this page

The date at the top is when this page last changed. Where a change affects what is collected or who it goes to, it will be said here rather than left to be noticed.