Privacy Policy

When you message our Facebook Page, Instagram account, or WhatsApp Business number to browse the menu or place an order, we process:

We do not sell this data. Chat history is kept only as long as needed for orders, support, fraud prevention, and legal duties. You can request deletion at any time via our Data Deletion page.

• Your Messenger / Instagram / WhatsApp account identifier (PSID / IGSID / phone number id) so we can reply in the same thread
• Message content needed to take your order (items, branch, collection or delivery, contact details you share)
• Order and payment status for kitchen fulfilment and tracking

We may collect the following types of Personal Information when you use our Service:

• Name, email address, phone number, address, and date of birth
• Payment information to complete transactions
• Delivery addresses and order history
• Geo-location data (if you have enabled this on our app or website)
• Marketing preferences (for email, SMS, or push notifications)

You may provide this information in a number of ways, such as:

• By placing an order via our website, app, or in-store
• Making a table reservation
• Registering to receive our email, SMS, or push communications
• Contacting our customer service team

We may also automatically collect information such as your device’s IP address, operating system, and browsing behaviour on our website. This information is aggregated and does not identify you personally.

We use your Personal Information for the following purposes:

• Processing and fulfilling your online and in-store orders
• Managing table reservations and sending you notifications
• Personalising your experience on our app and website
• Sending you marketing communications if you have opted in
• Improving our services through customer feedback and market research
• Responding to any complaints or inquiries
• Ensuring the safety and security of our Service

We will only process your Personal Information where:

• It is necessary to perform a contract with you (for example, processing your orders or reservations)
• You have given your consent (for example, opting in to receive marketing messages)
• It is necessary for our legitimate interests (for example, fraud prevention or improving our services)

We do not sell or share your Personal Information with third parties, except as necessary for the purposes described in this policy. For example, we may share your information with:

• Delivery partners to complete your order
• Payment processors to handle transactions securely
• Marketing service providers (with your consent) to send promotional materials

We may also disclose your Personal Information if required to comply with legal obligations or in response to legal requests. All third parties we work with are required to protect your data and only use it for the purposes outlined in this Privacy Policy.

If you opt in separately at checkout or in your preference centre, we may use anonymised operational data (such as order timing, value band, item categories, and fulfilment channel) to improve in-house sales forecasts and venue tools. We never use your name, email, phone, or address in this training pool. AI training consent is independent of marketing consent and you may withdraw it at any time without affecting your orders.

We are committed to protecting your Personal Information. We use encryption and strict access controls to safeguard your data. Although we take reasonable precautions, no data transmission over the internet can be guaranteed to be completely secure, so you share your information at your own risk.

Our servers are maintained internationally, but we ensure that any data transferred outside the UK is protected by similar security standards.

We will not keep your Personal Information for longer than is necessary for legitimate business purposes or as required by law. We will make sure any data retained is limited to what is necessary for the services being provided. Reservation data is typically kept for 24 months; marketing data until you unsubscribe. Anonymised AI training events are retained up to 24 months; nightly exports are deleted after 90 days.

We do not currently use automated decision-making processes that affect your rights. If this changes in the future, we will notify you and ensure that any such processes comply with the law.

Some of our Services contain links to other services provided by other data controllers that are not covered by this Privacy Policy and where information practices may be different from ours. You should consult the other services’ privacy policies before submitting any Personal Information, as we are not responsible for and have no control over Personal Information that is submitted to, or collected by, these third-party services.

We sometimes offer content or programmes that are sponsored by or co-branded with identified third parties (for example, competitions or promotions). These third parties can obtain Personal Information that you agree to submit to them to make use of the offer. We are not responsible for the collection and use of your Personal Information by these third parties. At the point of collection, we will let you know if these third parties will obtain this and how it will be processed and used.

You have certain rights regarding your Personal Information, including:

• Right of Access — request to see the information we hold about you
• Right of Rectification — ask us to correct any inaccurate or incomplete data
• Right of Erasure — request that we delete your data under certain circumstances
• Right to Restrict Processing — ask us to stop processing your data in specific situations
• Right to Object — object to processing based on our legitimate interests
• Right to Data Portability — request that we transfer your data to another provider

To exercise any of these rights, contact us at info@thegrillperiperi.co.uk or use the contact options below. You may also withdraw AI training or marketing consent in your preference centre at any time.

Our services are not intended for children under the age of 16 without parental or guardian consent. We encourage parents to supervise their children’s online activities and ensure their safety.

We may update this Privacy Policy from time to time to reflect new services or changes in the law. Any updates will be posted on our website, and you will be notified of significant changes. The date of the latest update will always be provided at the top of this page.