Privacy Policy

This policy explains how TOWNEAT LIMITED ("TownEat", "we", "us") uses personal data when you visit this website and when you use the TownEat apps and restaurant portal. We are the controller of that data.

Who we are

TOWNEAT LIMITED, registered in England and Wales, company number 17510615. Registered office: 10 Amanda Court, Edward Way, Ashford, TW15 3AZ, United Kingdom. Email: hello@towneat.co.uk.

This website

This website does not use cookies, analytics or advertising trackers, and it loads no content from other companies. It does not keep its own visitor logs. Our hosting provider, Fly.io, processes technical information such as your IP address so that pages can be delivered and its network kept secure.

If you email us, we use your email address and your message to reply to you.

Data we collect when you use TownEat

• Account details: your name, email address, phone number and password. Passwords are stored only in a protected, irreversible form.
• Orders: what you order and from which restaurant, the delivery address, the location you mark on the map, and your order history.
• Payments: card payments are processed by Stripe. We do not receive or store your full card number.
• Couriers: identity, right to work and vehicle documents, a photo used to confirm identity, and your location while you are online or on a delivery.
• Restaurants: business and contact details, menus, opening hours, and the information Stripe needs to make payouts.
• Support: the messages you send us and the details needed to resolve them.
• Devices: a notification token so that the app can send you order updates, and the technical data needed to keep the service secure.

Why we use it, and our lawful bases

• To provide the service you ask for: orders, deliveries, payments and payouts (performance of a contract).
• To meet our legal obligations, such as keeping financial records and checking that couriers have the right to work in the UK (legal obligation).
• To keep the platform safe, to prevent fraud and misuse, and to improve how it works (our legitimate interests).
• To send you messages about your account and your orders. We do not send marketing messages without your consent.

Who we share it with

We share personal data only as needed to run the service:

• The restaurant you order from and the courier who delivers your order receive the details needed for that order, such as your name and delivery address.
• Stripe, for card payments, payouts and the checks that payment rules require.
• Mapbox, for maps and delivery routes.
• Ideal Postcodes, for finding UK addresses from a postcode.
• Postmark, for sending account and order emails.
• Expo, for delivering app notifications.
• Our hosting providers: Fly.io (servers), Supabase (database and file storage) and Upstash (a temporary data store that keeps the service fast and secure).
• Public authorities, when the law requires it.

We do not sell personal data.

Where your data is stored

Our servers, main database and stored files are hosted in London, United Kingdom. Some of our providers, such as Stripe, Mapbox, Postmark, Expo and Upstash, may process data in other countries, including the United States. When they do, the transfer is protected by safeguards recognised under UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement.

How long we keep it

• Account details: while your account is open.
• Saved addresses: until you delete them or close your account.
• Order and payment records: six years from the end of the accounting period in which the transaction took place, as UK law requires.
• Courier documents: one year after the courier account is closed. An identity photo is replaced when a newer one is approved.
• Unfinished checkouts: seven days.
• Records of the emails we send: 48 hours after delivery or final failure.
• Emails you send us: as long as needed to deal with your request.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use these rights, email hello@towneat.co.uk with the subject "Privacy request".

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to deal with your concern first.

Security

We protect personal data with encrypted connections, access controls and two-step verification for our team. No system is completely secure, but we work continuously to keep your data safe.

Changes to this policy

We will update this policy when the way we use personal data changes. The date at the top of this page shows the latest version.