The privacy notice
we write for you.
Taking names, numbers and addresses means you owe your customers an explanation of what you do with them. That duty is yours, not ours — so we write the notice, you publish it under your own name, and here it is in full before you sign anything.
This specimen notice has not been through a solicitor yet.
It is published early on purpose. It is written from the promises we already make on Who owns your customers?, so you can see the shape of what you will be signing and tell us where it is wrong — but it is a draft, it has not been reviewed by a solicitor, and it is not the document that governs anything.
The agreement we send you before you commit is what governs, and we will send it in plain English before you are asked for anything. If you need the final wording today, ask us through the contact page.
It's written in your voice,
not ours.
Everything below the line is the specimen — the words that go on your storefront, with your shop's name where the brackets are. “We” means your shop; “Manto Order” means us. You can change any of it: you are the controller, so it is your notice.
Privacy notice for [Your shop]
Last updated [date]. [Your shop] is the data controller for the personal data described below. You can reach us at [your address], [your phone] or [your email].
Who is responsible for your data
We are — [Your shop]. When you order from us, whether through this site, our app, over the phone or at the counter, we decide what your details are collected for, who sees them and how long they are kept. In data protection law that makes us the data controller.
Our ordering system and till are provided by Manto Order, which holds your details on our behalf and acts only on our instructions. That makes Manto Order our processor, not a controller in its own right: it does not market to you, does not sell your details, and does not use them for its own purposes. Our agreement with them says so in writing.
What we collect
- Your name, phone number and email address.
- Your delivery address, where you are having food delivered.
- What you ordered, when, and what it cost — your order history with us.
- Any note you add to an order, such as a delivery instruction or a dietary request.
- Whether you have agreed to hear from us, how and when you agreed, and whether you have since opted out.
- Your loyalty balance, if you are collecting credit back on your orders.
We do not see or store your card number. Card payments are handled by our payment provider, Stripe, which takes your card details directly.
Why we use it, and our lawful basis
- To take, cook and deliver your order, and to contact you about it if something is wrong. That is performance of our contract with you.
- To keep our accounts and meet tax and food-safety duties. Legal obligation.
- To recognise you when you order again, so you do not have to type your address every time. Our legitimate interest in a service that works.
- To send you offers, where you have agreed or where you are an existing customer and we are telling you about similar food. Consent, or the soft opt-in. Every message we send has a way out, and using it costs you nothing.
Who else sees it
- Manto Order, which runs our storefront and our till, as our processor.
- Stripe, which processes card payments and is a controller in its own right for that — their privacy policy.
- Our delivery drivers, who get your address and your phone number and nothing else.
- Our accountant, and anyone we are legally required to tell.
We do not sell your details to anyone, and we do not pass them to other businesses for their own marketing.
How long we keep it
Order records are kept for as long as tax and accounting law requires. Your contact details and order history are kept while you are a customer of ours and for a reasonable period afterwards, so that we recognise you if you come back. Ask us to delete them sooner and we will.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it for a particular purpose, or ask for it in a form you can take elsewhere. Where we rely on your consent you can withdraw it at any time.
Ask us — the contact details are at the top. Because we are the controller, the request comes to us and we answer it; we do not send you to a software company. We answer within a month and we do not charge.
Marketing, and how to stop it
Every marketing message we send you has an unsubscribe or a reply-to-stop. Use it and we stop, permanently. Agreeing to hear from us is never a condition of ordering food, and saying no does not change the service you get.
Cookies
Our storefront uses what it needs to keep your basket and to keep you signed in, plus aggregated analytics that tell us which items sell. It does not carry advertising trackers.
Complaining
Tell us first — it is usually quicker. If we do not put it right, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. Complaining to them does not stop you coming back to us.
Changes
If this notice changes we update the date at the top, and if the change is significant we tell you rather than hoping you re-read it.
Blanks a shop has to fill in, and clauses a solicitor still has to check
The bracketed fields — shop name, trading address, contact details and the date. Plus anything specific to how a particular shop trades: age-restricted items, table service, CCTV on the premises, or a loyalty scheme run differently from the default of 5% credit back.
Draft of 9 September 2026. This specimen is the counterpart to our data processing agreement, which is what makes the second paragraph of clause 01 true. Our own notice, covering this website and your Manto account, is separate: the Manto Order privacy notice.
Your storefront gets this
on the day you go live.
Written for your shop, on your domain, in your name — included, not an add-on. Ask for it with the agreement before you commit to anything.