Privacy Policy

This Privacy Policy explains how Delish Dish("we", "us", "our") collects and uses your personal data when you use our website and mobile app to browse the menu and place orders for delivery or collection.

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Delish Dish is the data controller for the personal data described here. If you have any questions about this policy or your data, contact us at delishdishrest@gmail.com or 0191 71 60602.

Depending on how you use Delish Dish, we may collect:

• Account details — your name, email address, phone number, and (optionally) your date of birth. Your password is stored only as a securely hashed value; we never see or store it in plain text.
• Order details — the items you order, delivery address and postcode, collection/delivery preference, order notes, order history, and the amount paid.
• Payment information — card payments are processed by our payment provider, Stripe. We do not receive or store your full card number; Stripe handles that securely on our behalf.
• Technical & usage data — basic information such as your device and browser type, and data stored on your device (for example, your shopping cart and a login session token) to make the site work.

• To take, prepare, and fulfil your orders for delivery or collection.
• To create and manage your account, and let you view your order history.
• To send you order confirmations and status updates (e.g. accepted, ready) by email.
• To take payment and, where necessary, process refunds.
• To provide customer support and respond to your enquiries.
• To keep the service secure, prevent fraud, and meet our legal and accounting obligations.

We rely on the following lawful bases under the UK GDPR:

• Performance of a contract — to process and deliver the orders you place.
• Legitimate interests — to run and improve our service, and to keep it secure.
• Legal obligation — to keep records required by tax and consumer law.
• Consent — where we ask for it, for example any optional marketing (you can withdraw consent at any time).

We do not sell your personal data. We share it only with trusted service providers who help us run Delish Dish, and only as far as needed:

• Stripe — to process card payments securely.
• Resend — to send transactional emails such as order confirmations and password links.
• Vercel and Supabase — to host our website and store our data.
• Delivery couriers — where you choose delivery, we share the name, phone number, and address needed to deliver your order.

We may also disclose data where required by law, or to establish, exercise, or defend legal claims.

Essential — always on.We use a small amount of storage on your device to make the site work — for example, to remember the items in your cart and to keep you signed in. These don't require consent because the site can't function without them.

Analytics & advertising — only with your consent.When you first visit, we ask whether you're happy for us to also use:

• Google Analytics (GA4) and Google Tag Manager — to understand how visitors use the site.
• Meta Pixel — to measure and improve our Facebook/Instagram advertising.
• Microsoft Clarity — session recordings and heatmaps, so we can see how the site is actually used and fix confusing pages.

None of these load until you choose "Accept" in the cookie banner. If you choose "Reject", only the essential storage above is used. You can change your mind at any time:

We keep your account and order data for as long as your account is active and for a reasonable period afterwards, and as long as we are required to for tax, accounting, and legal purposes. When data is no longer needed, we delete or anonymise it.

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data (where we are not required to keep it).
• Restrict or object to how we use your data.
• Request a copy of your data in a portable format.
• Withdraw consent where we relied on it.

To exercise any of these rights, email us at delishdishrest@gmail.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

We use appropriate technical and organisational measures to protect your data, including encryption of data in transit (HTTPS) and secure hashing of passwords. No method of transmission or storage is completely secure, but we work to protect your information and review our measures regularly.

Delish Dish is intended for customers aged 18 and over, as ordering involves payment. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will remove it.

Some of our service providers (for example, our payment, email, and hosting providers) may process data outside the UK. Where they do, we rely on appropriate safeguards — such as adequacy decisions or standard contractual clauses — to protect your data.

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Please check back periodically.

If you have any questions about this Privacy Policy or how we handle your data, contact us:

• Email: delishdishrest@gmail.com
• Phone: 0191 71 60602