Privacy policy

Sweet Dezire (“we”, “us”, “our”) operates the Sweet Dezire website and mobile app so you can browse our menu, place orders for collection or delivery, earn loyalty stamps, and manage your account.

This privacy policy explains what personal data we collect, how we use it, who we share it with, and your rights. Please read it carefully. By using the website or app you agree to this policy.

Sweet Dezire is the data controller for personal information processed through this website and app.

If you have questions about this policy or your data, contact us using the details at the end of this document.

Account details: name, email address, phone number (if provided), date of birth (if provided at sign-up), profile photo (if you upload one), and authentication data when you sign in (including via Google or Apple where enabled).

Orders and delivery: items ordered, prices, fulfilment type (delivery or collection), delivery address, order notes, order status, and payment status. For delivery we may store address details including coordinates when you choose a location on the map or use address search.

Payment information: payments are processed by Stripe. We do not store your full card number on our servers. Stripe provides us with limited information such as the last four digits of your card, card brand, and payment identifiers needed to complete and support your order.

Loyalty programme: stamp balance, rewards you redeem, and voucher usage linked to your account.

Preferences: notification choices (push and email updates where offered), app language, and theme settings stored on your device or account.

Device and app data: push notification tokens, basic technical logs needed to run the service (for example error diagnostics), and limited usage analytics when enabled to help us improve reliability and fix issues.

Communications: messages you send to us (for example support emails) and records needed to respond.

To create and manage your account and authenticate you securely.

To process orders, arrange collection or delivery, send order updates, and provide customer support.

To operate our loyalty stamp card, apply rewards, and prevent misuse of promotions.

To send push notifications about your orders (for example when your order is ready) when you have allowed notifications.

To send marketing or product updates by email only if you have opted in; you can change this in Settings in the app.

To improve the website and app, troubleshoot problems, and protect against fraud or abuse.

To comply with legal, tax, and accounting obligations.

Where UK data protection law applies, we rely on: (a) contract — to provide the website and app and fulfil your orders; (b) legitimate interests — to run and improve our business, keep the service secure, and communicate about your orders (balanced against your rights); (c) consent — for optional marketing emails and push notifications where required; and (d) legal obligation — where we must keep records for tax or regulatory purposes.

Service providers who help us operate the website and app, under contracts that require them to protect your data, including:

• Supabase — authentication, database, and backend infrastructure.

• Stripe — payment processing.

• Expo / Apple / Google — app distribution, sign-in, and push delivery infrastructure as applicable to your device.

• Vercel — website hosting for the Sweet Dezire web experience.

• Google (Places API) — address search and location details when you use address lookup features in the app; on the website, optional public Google Maps ratings and review snippets on the home page when that feature is enabled.

• Analytics and monitoring tools (where enabled) — to understand crashes and improve stability.

We may share information if required by law, to protect our rights, or in connection with a business transfer (for example a merger), subject to appropriate safeguards.

We do not sell your personal information.

Some providers may process data outside the United Kingdom. Where this happens, we use appropriate safeguards (such as standard contractual clauses or UK adequacy regulations) as required by law.

We keep account information while your account is active and for a reasonable period afterwards if you delete your account, unless we must keep it longer for legal reasons.

Order records are typically retained for the period required for tax, accounting, and dispute resolution (often up to six years for financial records).

Loyalty and marketing preferences are kept while relevant to your account or until you withdraw consent where applicable.

Depending on where you live, you may have the right to access, correct, delete, or restrict use of your personal data, to object to certain processing, to withdraw consent, and to data portability.

You can update much of your information in the app (profile, addresses, notification settings). To delete your account, use Delete account in Settings or contact us.

You may complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data, though we hope you will contact us first so we can help.

Order-related push notifications are sent when you enable notifications on your device. Marketing emails are only sent if you opt in via Settings; you can turn this off at any time in the app.

We use technical and organisational measures appropriate to the nature of the data, including encrypted connections (HTTPS), access controls, and secure payment handling through Stripe. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.

We may update this policy from time to time. We will post the new version on the website and in the app and update the “Last updated” date. Significant changes may also be notified where appropriate.

For privacy questions or to exercise your rights, contact Sweet Dezire:

Email: enquiries@sweetdezire.co.uk

If we publish additional contact details in the app (for example a support phone number), you may also use those channels.