Last updated: 25 April 2026
This Privacy Policy explains how TakeawayFriend ("we", "us", "our") collects, uses, and protects personal data when you use our platform, including our website at takeawayfriend.co.uk, our restaurant ordering websites hosted on subdomains (e.g. yourshop.takeawayfriend.co.uk), our Android Customer ordering app, and our Restaurant POS app (together, the "Service").
We are registered in the United Kingdom and operate from 1/3 DunEden Business Centre, 8 Harrison Road, Dundee, DD2 3SN. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who is the data controller?
For data we collect about restaurant owners who sign up for TakeawayFriend (our B2B customers), we are the data controller.
For data we collect about customers placing food orders through a restaurant's TakeawayFriend ordering website or Customer app, the restaurant is the data controller and we act as their data processor. Each restaurant has its own privacy policy that applies to your relationship with them.
2. What information we collect
From restaurant owners (our customers)
- Business name, trading address, contact email and phone number
- Account login details (email, hashed password)
- Payment details for our subscription (handled by Stripe — we never see your card numbers)
- Menu, pricing, opening hours, branding (logos, colours)
- Order history and aggregated business analytics
From customers ordering food
- Name, delivery address, postcode, phone number, email address
- Order details (items, prices, special instructions)
- Payment information (processed directly by Stripe — we do not store card details)
- IP address and basic device information for security and fraud prevention
From visitors to takeawayfriend.co.uk
- Information you submit through our contact form (name, email, restaurant name)
- Basic analytics (pages visited, browser type, approximate location) — only when you accept cookies
3. How we use your information
We use personal data only for the purposes described below, and only where we have a lawful basis to do so under UK GDPR.
- To provide the Service — processing orders, sending order confirmation emails, displaying orders to the relevant restaurant, processing payments via Stripe (lawful basis: contract)
- To support our customers — responding to enquiries, providing technical assistance (lawful basis: legitimate interest, contract)
- To improve the Service — fixing bugs, developing new features, analysing aggregated usage (lawful basis: legitimate interest)
- To meet legal obligations — tax reporting, fraud prevention, responding to lawful requests (lawful basis: legal obligation)
- To send marketing — only with your consent, and you can unsubscribe at any time (lawful basis: consent)
4. Who we share your information with
We share personal data only with the following categories of recipients, and only as necessary:
- Restaurants — when you place an order, your name, address, phone, and order details are shared with the restaurant fulfilling your order so they can prepare and deliver it
- Stripe (payment processor) — for processing card payments. Stripe is PCI-DSS compliant and handles your card data directly. See stripe.com/gb/privacy
- Email service providers — for sending order confirmations and notifications
- Cloud hosting — our servers are operated in the United Kingdom
- Authorities — where required by law (e.g. court order, fraud investigation)
We do not sell your personal data to anyone, ever.
5. International data transfers
Your data is stored on servers located in the United Kingdom. Some of our service providers (such as Stripe) may transfer data to countries outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner.
6. How long we keep your data
- Order records — kept for 7 years to meet HMRC tax record-keeping obligations
- Account information — kept while your account is active, and for 12 months after closure
- Marketing preferences — kept until you unsubscribe
- Contact form enquiries — kept for 24 months
7. Your rights
Under UK GDPR, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — ask us to delete your data, subject to legal retention requirements
- Right to restrict processing — limit how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on our legitimate interests, including direct marketing
- Right to withdraw consent — where we rely on your consent
To exercise any of these rights, email us at admin@takeawayfriend.co.uk. We will respond within one calendar month.
8. Cookies
We use only essential cookies needed to keep you logged in and the Service running. We do not use advertising or tracking cookies on our customer-facing ordering pages. The takeawayfriend.co.uk landing page may use basic analytics cookies, with your consent, to understand how visitors find our service.
9. Security
We take security seriously. All connections are encrypted using TLS (HTTPS). Passwords are hashed using industry-standard algorithms. Card data is handled directly by Stripe and never touches our servers. We regularly review our security practices and respond promptly to any reports of vulnerabilities.
10. Children
Our Service is not intended for use by children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect when we last made changes. For significant changes, we will notify you by email or through the Service.
12. How to contact us
For any questions about this Privacy Policy or our data practices, please contact us:
- Email: admin@takeawayfriend.co.uk
- Post: TakeawayFriend, 1/3 DunEden Business Centre, 8 Harrison Road, Dundee, DD2 3SN, United Kingdom
13. Complaints
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113