Chefsline
Legal · Privacy

Your data, treated like a friend's.

We collect the minimum to deliver you food you'll love — and we explain every line in plain English. No dark patterns, no hidden trackers, no sale of your data. Ever.

Last updated: 14 April 2026Effective: 1 May 2026Plain-English summary: at the top of every section

Who we are

In short: Chefsline is the data controller for the personal information you give us when ordering food, browsing the site, or contacting our team.

Chefsline (“Chefsline”, “we”, “us”) is a company registered in England & Wales (Company No. 13578901) with its registered office at 4 Princelet Street, London E1 6QH. We are registered with the UK Information Commissioner's Office (ICO) under reference ZA821094.

If you have any questions about how we handle your data, you can email our Data Protection Officer at privacy@chefsline.co.uk or write to us at the address above.

What we collect

In short: We collect what we need to deliver food to your door, process payment, and keep your account safe.

We collect the following categories of personal data:

CategoryExamplesSource
IdentityName, date of birth (for restricted items)You, when you sign up
ContactEmail, phone, delivery addressesYou, at sign-up and checkout
Order historyItems, restaurants, delivery times, ratingsGenerated as you use Chefsline
PaymentCard last 4, expiry, billing postcodeTokenised via Stripe — we never see the full PAN
DeviceIP, browser, app version, crash logsAutomatically collected for security & reliability
LocationApproximate location for restaurant matchingYou opt-in via your browser/device

How we use your data

In short: Mostly to take orders, deliver food, and tell you when it's on the way. Sometimes to improve the service. Never to sell to third parties.

  • Provide the service. Take and confirm orders, route them to the right restaurant and rider, and send delivery updates.
  • Process payment. Charge your card, process refunds, prevent fraud.
  • Keep you safe. Detect suspicious activity on your account and prevent unauthorised access.
  • Improve Chefsline. Aggregated, anonymised metrics help us understand which features are working.
  • Stay in touch. Operational emails (receipts, delivery alerts) are essential. Marketing emails only if you opt in.

We rely on the following lawful bases under Article 6 of the UK GDPR:

  • Performance of a contract — to fulfil orders you've placed.
  • Legitimate interests — to detect fraud, secure our service, and improve our product (where these are balanced against your rights).
  • Legal obligation — to keep tax and accounting records, and to comply with food safety law.
  • Consent — for marketing communications and non-essential cookies. You can withdraw at any time.

Who we share data with

In short: Restaurants and riders (so they can fulfil your order), payment and infrastructure providers, and authorities only when legally required.

  • Restaurants get your order details and a first name. They never get your address — only the rider does.
  • Riders get your delivery address and contact details for the duration of the delivery, then they're hidden again.
  • Payment processors — Stripe (PCI-DSS Level 1) processes all card payments under their own privacy policy.
  • Infrastructure — AWS (eu-west-2, London) hosts our service. Cloudflare provides DDoS protection. Sentry receives crash reports.
  • Authorities — only with a court order, statutory request, or a credible safety threat.

How long we keep it

We keep your account and order history for as long as your account is open. After you close your account:

  • Account profile — deleted within 30 days of your request.
  • Financial records — kept for 6 years to satisfy HMRC requirements.
  • Anonymised analytics — kept indefinitely.
  • Marketing preferences — kept indefinitely so we honour your opt-out.

Your rights

In short: You can ask us for a copy of your data, correct it, delete it, or object to how we use it — at any time.

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct any inaccurate or incomplete information
  • Erase your data (with some exceptions for legal records)
  • Restrict or object to certain processing
  • Receive your data in a machine-readable format (data portability)
  • Withdraw consent at any time, where consent is the legal basis

To exercise any of these, email privacy@chefsline.co.uk. We respond within one calendar month. If you're unhappy with our response, you can complain to the Information Commissioner's Office.

Changes to this policy

We'll email you and post a notice on the homepage at least 30 days before any material change takes effect. Minor edits (typos, link fixes) take effect on publication and are noted in the changelog at the bottom of this page.

Still have questions?

Our team replies in under 4 hours, every day from 8am to midnight UK time.

Help centreContact us
Privacy Policy · Chefsline