Privacy Notice

This service is operated by the restaurant you called. Your order is processed using an AI phone ordering system. The restaurant is the data controller for your personal data.

When you place an order by phone, we collect:

• Your phone number (automatically from the call)
• Your name (if you provide it)
• Your delivery address and postcode (for delivery orders)
• Your order details (items, quantities, total)
• A recording or transcript of the call, processed by AI

We do not collect payment card details. Payments are handled by Stripe — see stripe.com/gb/privacy.

Your data is used solely to process and fulfil your order. The lawful basis is contract performance (UK GDPR Article 6(1)(b)).

We do not use your data for marketing without your consent.

Your call is answered by an AI assistant. The call audio is processed by OpenAI (via Vapi) to understand your order. By placing an order, you acknowledge this automated processing. You may speak to a human by asking to be transferred, where available.

We use the following third-party processors:

• Supabase — database (EU data centres)
• Twilio — phone calls and SMS
• Vapi / OpenAI — AI call processing
• Stripe — payment processing

We do not sell your data to any third party.

Your personal data (name, phone number, delivery address) is retained for as long as the restaurant operates this service. When the restaurant closes its account, all personal data is permanently deleted.

Financial records (order amounts, items, dates) are retained for 7 years as required by HMRC, after which they are deleted.

You may request erasure of your personal data at any time — see Your Rights below.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your personal data
• Object to processing
• Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, contact the restaurant directly.