Privacy notice

What we collect

• Orders: your name, delivery address, phone number, email, what you ordered, delivery notes and the order total. Card orders are collected on Stripe’s checkout page and shared with us.
• Saved details: if you enter your email on the account page, the name, delivery address, phone and city you save, so you don’t have to type them again.
• Reviews: your rating, review text, the name and area you choose to show, and optionally your email (never published). To spot fake reviews we keep a one-way scrambled code of the network address the review came from, not the address itself.

Why we use it

To take, prepare and deliver your orders (performing our contract with you), to show you your order history, to contact you about an order, and to publish and check reviews (our legitimate interest in trustworthy reviews, which UK consumer law also requires). We don’t sell your data or use it for advertising.

Who handles it for us

Stripe processes card payments: we never see or store your card number. Vercel hosts the website and Upstash stores orders, saved details and reviews, over encrypted connections. Orders you send by WhatsApp go through WhatsApp.

How long we keep it

• Saved details: removed automatically about a year after you last updated them.
• Orders: kept for two years. Stripe keeps its own payment records as the law requires.
• Reviews: for as long as they are published, or until you ask us to remove them.

Your rights

You can see, correct or delete what we hold. Saved details can be deleted from your account page with “Delete my saved data”. For anything else, including removing a review, contact us using the details at the bottom of the page. You can also complain to the Information Commissioner’s Office (ico.org.uk).