Privacy Policy

Last updated: 3 November 2026

1. Who we are
2. What this policy covers
3. The data we collect
4. How we use your data
5. Offers and newsletters
6. This website and cookies
7. Who we share data with
8. Where your data is kept
9. How long we keep data
10. How we protect your data
11. Children
12. Your rights
13. How to delete your account and data
14. Changes to this policy

1. Who we are

This is the online ordering website of the restaurant named at the top of this page. It runs on the FoodX ordering platform, which is run by FoodX Online Food Ordering & POS System ("FoodX", "we", "us"), based in the United Kingdom.

FoodX and the restaurant. The restaurant is responsible for your orders and for its own offers to you. FoodX handles those details for the restaurant, on its behalf and on its instructions, so it can take and fulfil your order and, if you agree, send you its offers. FoodX is responsible for your FoodX account and the FoodX newsletter. One FoodX account works on every restaurant website powered by FoodX.

For any question about this policy or your personal data, write to info@foodx.com. We answer for FoodX and pass on to the restaurant anything that is for it. You can also contact the restaurant directly using its details on this website.

2. What this policy covers

This policy explains how personal data is handled when you:

• use this restaurant website;
• create or use a FoodX account on a restaurant website powered by FoodX;
• order food through this website, or from the restaurant in another way (for example by phone) where we hold your order details for the restaurant;
• choose to receive the restaurant's offers or the FoodX newsletter.

This policy follows the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Please also read the Terms and Conditions.

3. The data we collect

Your account

When you sign up we collect your first and last name, e-mail address and a password. If you choose to sign in with an existing account from another service, that service shares your name, e-mail address and an account identifier with us. We also record the restaurant website you signed up on, the date and your IP address.

Your phone number

Before your first order you must add a mobile number and confirm it with a code we send by text message.

Your name, e-mail address and a confirmed mobile number are needed to create an account and order, and a delivery address for delivery orders. Without them we cannot take your order. Everything else, including your marketing choices, is optional.

Your orders

When you order we record what you ordered, prices, fees, discounts and tips, delivery or collection and the time you asked for, your notes to the restaurant, how you paid and a payment reference, the name, e-mail address, phone number and address used for the order, and the IP address the order came from.

Please do not put allergy or health information in your order notes. If you have an allergy, contact the restaurant directly before you order.

Addresses and location

You can save delivery addresses in your account. If you enter a postcode, we look up the matching addresses. If you press "Use my location", your browser asks your permission first and then shares your location so we can find your address.

Payments

Card details are entered directly into a secure payment form run by a payment service provider. Your full card number never reaches our servers. We receive a payment reference, whether the payment worked and, for the restaurant's records, the card type and the last four digits.

Security records

We record sign-ins and failed sign-in attempts (time, IP address and the e-mail address used, never the password), and password reset requests.

Your marketing choices

We record your choices about offers and newsletters and when you made or changed them.

4. How we use your data

Where we rely on legitimate interests, we have balanced them against your rights, and you can object at any time (see section 12). We do not make decisions about you that have legal or similarly significant effects using only automated means. Our automatic checks against fake orders may ask for an extra check or pause orders for a while; if you think this is wrong, contact us and a person will look at it.

5. Offers and newsletters

• Your choice. When you sign up on a restaurant website, or the first time you sign in on another restaurant website powered by FoodX, you can choose to receive that restaurant's offers by e-mail or text message, and the FoodX newsletter. These boxes are optional and never ticked in advance. You can order without ticking them.
• Each restaurant is separate. Saying yes to one restaurant never means yes to another.
• We check your address. When you say yes to offers by e-mail, we e-mail you a link to confirm that the address is yours, unless the service you signed in with has already confirmed it.
• Who sends them. FoodX sends the restaurant's offers on its behalf, in the restaurant's name, from a FoodX e-mail address. Each one shows the restaurant's name and postal address and says why you are receiving it. The FoodX newsletter comes from FoodX.
• How often. We limit how many offers you can receive each week, from each restaurant and in total.
• How to stop. Every marketing e-mail has an unsubscribe link that works with one click. You can also change your choices at any time in My account, under "Offers and news", on any restaurant website, or e-mail info@foodx.com. Stopping is free and you do not need to give a reason.
• Do-not-contact list. If you unsubscribe, an e-mail to you bounces permanently or you mark one of our e-mails as spam, we keep your e-mail address (and, if you stop all marketing, your phone number) on a do-not-contact list, for that restaurant or for all marketing, so we never send you marketing by mistake.
• No bought lists. We never buy, rent or sell e-mail or phone lists.

Order e-mails, such as confirmations and refunds, are part of your order and are not marketing.

6. This website and cookies

This website uses cookies, kept for up to one year, to sign you in, remember your details and choices, and keep your basket and order. It uses analytics cookies only if you accept them. The payment and map services used on its pages may set their own cookies. The Cookie Policy and the cookie notice on this website explain your choices.

Like most websites, our servers record technical details of each visit, such as your IP address, browser type, the page requested and the time.

7. Who we share data with

We do not sell your personal data. We share it only as follows:

• The restaurant you order from receives your name, phone number, e-mail address, delivery address, notes and order, so it can prepare and deliver your food and contact you about it.
• The restaurant whose website you signed up on can see your name, contact details, your most recently saved address and your offers choices for that restaurant, even if you have not ordered from it yet.
• Service providers that work for us under contract and only on our instructions:
  • hosting and IT providers (our servers, database and backups);
  • e-mail and text message delivery providers (order e-mails, codes and marketing to people who agreed);
  • address lookup services;
  • bot-protection and security services;
  • an analytics provider, only if you accept analytics cookies.
• Payment and map services. Payment services take payments and make refunds for the restaurant; map services show maps and find addresses. They also use data for their own purposes, such as preventing fraud, under their own privacy policies.
• Sign-in services you choose. If you sign in with an existing account from another service, that service knows you are signing in to FoodX.
• Other businesses the restaurant uses to take, pass on or deliver its orders receive only the details needed for those orders.
• Authorities and advisers, when the law requires it (for example HM Revenue & Customs or the police), to protect legal rights, or professional advisers under a duty of confidentiality.
• A buyer of the business, if FoodX or the restaurant is sold, under the same protections as in this policy.

8. Where your data is kept

The FoodX ordering platform's servers and main database are in the United Kingdom. Some of our service providers may handle data in other countries. When they do, we make sure the transfer is protected as UK law requires, for example because the UK recognises that country's protection as adequate, or through contract terms approved for this purpose. You can ask us about this at info@foodx.com.

9. How long we keep data

We keep personal data only as long as we need it for the purposes in this policy. In particular:

• your account: until you delete it;
• orders, payments and refunds: at least 6 years, as UK tax and accounting law requires;
• security records and server logs: as long as needed to keep accounts and our systems safe;
• your marketing choices and the do-not-contact list: as long as needed to respect your choices and show that we did.

Section 13 explains how to delete your account and data, and what we keep afterwards.

10. How we protect your data

We use appropriate technical and organisational measures to protect your data. For example, this website uses encrypted connections, passwords are stored only in a scrambled one-way form that nobody can read, sign-in is paused after repeated failed attempts, codes expire quickly, card numbers are handled by our payment service provider and never reach our servers, and staff and restaurant systems require a sign-in. If something goes wrong, we will act quickly and tell you and the Information Commissioner's Office when the law requires it.

11. Children

Our services are not meant for children under 16, and we do not knowingly create accounts for them. If you believe a child has given us personal data, contact info@foodx.com and we will deal with it.

12. Your rights

You have the right to:

• get a copy of the personal data we hold about you;
• have wrong or incomplete data corrected;
• have your data deleted where there is no good reason to keep it;
• ask us to limit how we use your data;
• object to our use of your data where we rely on legitimate interests, and object to direct marketing at any time;
• receive the data you gave us in a common electronic format;
• withdraw your consent at any time, without affecting what was done before.

You can change your name, phone number and marketing choices, and delete your account (see section 13), yourself in My account. For anything else, e-mail info@foodx.com. It is free, whether your request is for FoodX or for the restaurant. We may ask you to prove who you are. We will reply within one month, or tell you within that month if a complex request needs up to two more months.

If you are unhappy with how your data is handled, please tell us first at info@foodx.com so we can put it right. We will confirm that we have received your complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

13. How to delete your account and data

You can ask us to delete your personal data at any time. It is free and you do not need to give a reason. There are two ways:

1. Delete your account yourself. Sign in on any restaurant website powered by FoodX, open My account (the person icon at the top of the page), choose Account Details, select "Delete your account" at the bottom of the page and confirm. Your account is deleted straight away.
2. E-mail us. Send an e-mail to info@foodx.com with the subject "Delete my data", from the e-mail address on your account if you can. We may ask you to prove who you are. We will delete your data and reply within one month.

What we delete. Your name, e-mail address, phone number and password, and the link to any service you signed in with, including the name, e-mail address and account identifier that service shared with us. We also withdraw your marketing choices, and you can no longer sign in to the account.

What we keep. As section 9 explains, we keep order and payment records, with the name, contact details and address used for each order, for at least 6 years because UK tax and accounting law requires it. Your saved addresses are closed but kept with your order records. We also keep security records, the do-not-contact list and the record of your marketing choices. Deleted data may stay in our backups for a short time until they expire.

If you signed in with another service. You can also remove FoodX from the apps and websites connected to your account in that service's settings. This stops that service sharing your data with us, but it does not delete the data we already hold, so please also use one of the two ways above.

14. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. If we make an important change, we will make it clear on this website and, where appropriate, tell you by e-mail.