Last updated: 28 August 2026
Dine-in without an account: the order keeps the table number, the dishes, and an order id. We do not store a name, phone or address for that visit.
For delivery or collection we write your name and phone on the order when you check out, and a delivery address snapshot if you want it brought to you. We collect this even if you are not signed in — otherwise we cannot deliver or match a collection. The basis is contractual necessity (UK GDPR Art. 6(1)(b)). If you sign in, we also keep name, phone and addresses on your account for the next order.
Sign-in is handled by Supabase Auth, using a one-time email code or a Google account. There is no separate password.
Stripe is our payment processor. Card numbers appear only on Stripe's hosted page. Our servers do not receive or store card numbers.
Supabase processes accounts, addresses and orders, stored in its London (eu-west-2) region. The site itself runs on a server in London. Your data stays in the UK.
When you fill in an address, the postcode you type is sent to Ideal Postcodes (a UK address service) to fetch the house list. If you use "fill from my location", the coordinates from your browser go to postcodes.io and OpenStreetMap's Nominatim to find the street. These services see only that lookup — never your name or your order.
Completed orders are kept for about six years so we can meet HMRC record-keeping.
You can delete your account yourself at any time on the My Account page: the profile and saved addresses are removed immediately and cannot be recovered. Completed order records still have to stay for the bookkeeping period above, but are no longer linked to you.
You can ask for a copy of the personal data we hold about you, or ask us to delete it. We respond within 30 days. Use the phone or email on this page.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO, ico.org.uk).
This site does not set analytics or advertising cookies by default, and there is no consent banner.
We load Plausible only if the shop has configured a Plausible domain. It still does not use cookies.
Your cart, language choice, sign-in session and the "on this device" order list live in your own browser's local storage, on your device only. Clearing browser data wipes them.
10 Anson Street, Liverpool L3 5NY