PRIVACY POLICY

This policy explains what personal information Ofada Manchester (“we”) collects when you order from this website, why, who we share it with and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

WHO WE ARE

Ofada Manchester is the data controller. Contact us about your data at hello@ofadamanchester.com or on WhatsApp +44 7932 541874.

WHAT WE COLLECT

• Order details: your name, email address, mobile number, what you ordered, the pickup or delivery time you chose and any notes you add.
• Delivery details: your address and postcode, and the distance from our kitchen we work out from it.
• Allergy information you choose to tell us in your notes or messages. We only use it to prepare your food safely.
• Payment: payments are handled by Stripe. We never see or store your full card number.
• Technical data: your IP address, used briefly to stop abuse of the checkout (rate limiting).

We don't use advertising or tracking cookies, and you don't need an account to order.

WHY WE USE IT

• To take, prepare and deliver your order and contact you about it — needed to carry out our contract with you.
• To keep accounting and tax records — a legal obligation.
• To prevent fraud and misuse of the website — our legitimate interests.
• To act on allergy information you give us — with your consent, which you can withdraw by telling us.

We don't send marketing messages, and we never sell your information.

WHO WE SHARE IT WITH

Only the services that run this website and your order:

• Stripe — card payments.
• Supabase — stores orders securely.
• Vercel — hosts the website.
• Resend — sends your order confirmation email.
• Twilio / WhatsApp — sends us a notification of your order (name, phone, address and items).
• postcodes.io — your postcode only, to work out the delivery distance.
• Upstash — your IP address, briefly, for rate limiting.
• Our delivery driver or courier — your name, address, phone and order, for delivery only.

Some of these providers process data outside the UK (for example in the USA). Where they do, they use approved safeguards such as the UK International Data Transfer Addendum or the UK–US Data Bridge.

HOW LONG WE KEEP IT

• Order records: 6 years, as required for UK tax purposes.
• Rate-limiting data: a few minutes.
• Your cart: only in your own browser, until you check out or clear it.

YOUR RIGHTS

You can ask to see the information we hold about you, have it corrected or deleted, restrict or object to how we use it, or receive a copy to take elsewhere. Some records we must keep by law. Contact us at hello@ofadamanchester.com and we'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.

COOKIES

See our cookie notice.

CHANGES

If we change this policy we'll update the date at the top of this page.