Privacy Policy

Last Updated: 23 July 2025

Shenaha Ltd trading as Zaazi At The lodge (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website or mobile application (“Platform”).

1. Who We Are

We are a UK-based restaurant offering food ordering (delivery & collection) and table booking services. If you have any questions about this policy, please contact:

Zaazi At The lodge
24 Birmingham Road
zaaziatthelodge@gmail.com
0190277777

2. What Information We Collect

a) Personal Information

• Name
• Email address
• Phone number
• Delivery address
• Table booking details
• Account credentials (passwords are securely hashed and cannot be accessed or viewed in plain text)

b) Payment Information

We do not store or process card details directly. All payments are securely handled by Stripe. If you choose to save a card for future use, the data is stored securely by Stripe in accordance with PCI-DSS standards.

c) Technical Information

• IP address
• Browser type and version
• Device identifiers
• Usage data (pages visited, time spent, etc.)

3. How We Use Your Data

• Process and deliver your food orders
• Manage table bookings
• Communicate with you (order updates, booking confirmations, etc.)
• Improve our services and user experience
• Comply with legal and regulatory requirements

4. Lawful Bases for Processing

• Consent – when you opt in to marketing communications
• Contract – to fulfill your orders or bookings
• Legal obligation – to comply with financial or regulatory obligations
• Legitimate interests – for analytics, fraud prevention, and service improvement

5. How Your Data Is Stored

We take appropriate technical and organisational measures to protect your data. Personal data is stored securely within the UK or EEA. Where third-party services are used (e.g. Stripe), we ensure they are compliant with UK GDPR standards.

6. Sharing Your Information

We only share your information with:

• Stripe (for payment processing)
• Hostinger (our hosting provider)

We do not sell your data to third parties.

7. Cookies & Browser Storage

We use browser storage technologies such as localStorage andsessionStorage to support essential platform functionality — including logging in, storing session preferences, and processing orders. These tools do not track users and are considered strictly necessary under UK law. Therefore, we do not require user consent for their use.

8. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing activities
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise your rights, please contact us at [Your Email].

9. Data Retention

We retain your data only as long as necessary for the purposes set out above or as required by law (e.g. for tax or regulatory reasons).

10. Children’s Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page, with the revised date.

12. Your Account

If you choose to create an account on our Platform, we collect and store the information you provide during registration, including your name, phone number, email address, and hashed password.

You are responsible for keeping your login credentials secure. If you believe your account has been compromised, please contact us immediately.

You can request deletion of your account and associated data at any time by contacting us at zaaziatthelodge@gmail.com. Alternatively, you have the option to delete your account directly through the Account page of the Platform. Initiating deletion through the Account page will result in the irreversible removal of your account and all associated data, including any stored payment methods or billing information, where applicable.

13. Email Communications

We use email to send:

• Essential communications (e.g., order confirmations, booking updates, account information)
• Marketing and promotional offers (only with your explicit consent or where permitted by law)

We may send you emails about our services, offers, and updates if you have registered or placed an order with us. We rely on our legitimate interest to contact our existing customers about similar products and services, in accordance with applicable law.

If you have not placed an order or registered with us, we will only send you marketing emails if you have given your explicit consent.

You cannot opt out of essential service-related emails while using our Platform. However, you can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in the email or by updating your preferences in the app.

14. Push Notifications

With your consent, we may send you push notifications through our mobile application to inform you about order status, table bookings, or promotions. We use Expo’s push notification service. When enabled, Expo may collect a unique push token from your device to deliver these notifications. This token does not include personal identifying information and is not used for tracking.

You can opt out of receiving push notifications at any time by changing your device settings or disabling push notification on the account page of the app.

Contact Us

For any privacy-related queries or concerns, contact:

Zaazi At The lodge
24 Birmingham Road
zaaziatthelodge@gmail.com
0190277777