Privacy notice

This notice explains what personal data Spice of Lahore ("we", "us") collects when you use this website and order from us, and what we do with it. We are the data controller. Our address is 461c Cheetham Hill Road, Manchester M8 9PA. You can contact us at spiceoflahore786@gmail.com or on 0161 503 7266.

What we collect

• Your order: the dishes you order, your name, mobile number, any notes you write (for example allergies), and your email address if you choose to give one.
• Delivery orders only: your delivery address and postcode.
• Payment: if you pay by card, you pay on Stripe's secure page. We never see or store your card number. Stripe tells us whether the payment succeeded and gives us a payment reference.
• Technical data: your browser sends us basic information (such as IP address) when you visit, which is kept in our server logs for security.

Your location

If you tap "Use my current location", your browser asks for your permission. Your coordinates are sent from your browser to the free postcodes.io service to find your postcode. The result (postcode and the house number you type) is saved only in your own browser so we can pre-fill the checkout. We do not store your live location on our server. For delivery orders we check the postcode you enter to confirm it is inside our delivery area.

Why we use it

• To take, prepare, deliver and (if needed) refund your order. This is necessary to carry out our contract with you.
• To keep accounting and tax records, which the law requires.
• To run the restaurant safely and prevent fraud or abuse of the website, which is in our legitimate interests.

We do not sell your data and we do not send marketing messages.

Who we share it with

• Stripe – to take card payments.
• postcodes.io – to look up and check postcodes.
• Our hosting provider – who stores the website and its database.
• Our delivery riders and kitchen staff – only the details needed to prepare and deliver your order.
• Google – this site loads Google Fonts and a Google Map, so Google may receive your IP address when those load.
• Authorities or advisers, where the law requires it.

Cookies and browser storage

We only use what the site needs to work: a session cookie and a security token, and your browser's storage to remember your basket and delivery details. We do not use advertising or analytics cookies.

How long we keep it

Order records are kept for up to 6 years for accounting and tax purposes, then deleted. Server logs are kept for a short period only.

Your rights

Under UK data protection law you can ask to see the data we hold about you, correct it, have it deleted (where we are not required to keep it), restrict or object to our use of it. Contact us using the details above. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.