Privacy Policy

1. Who we are

Yum (“we”, “us”) operates a food ordering platform connecting customers in Jersey with local restaurants. This policy explains what personal data we collect, why, and what rights you have over it.

2. What we collect

• Account details — name, email address, phone number (optional), and a securely hashed password. We never store passwords in plain text.
• Order details — delivery address, order contents, and order history, so you can track deliveries and reorder past meals.
• Payment information — handled directly by our payment processor (Stripe). We never see or store your card details.
• Usage data — basic technical logs (IP address, browser type, pages visited) used for security and to keep the service running reliably.

3. How we use it

We use your data only to:

• Take, process, and deliver your orders
• Let you track deliveries and view/reorder past orders
• Communicate with you about an order (confirmations, status updates, delivery issues)
• Keep the platform secure and prevent fraud
• Meet our legal and accounting obligations

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who we share it with

We share the minimum necessary information with: the restaurant fulfilling your order (name, order contents, delivery address, contact details), our payment processor (Stripe), and our hosting/database providers, all solely to operate the service. We do not sell or rent your data to anyone else.

5. How long we keep it

We keep order records for as long as your account is active, and for a reasonable period afterwards to meet accounting and tax obligations. You can request deletion of your account at any time (see Section 6) — order records tied to a restaurant’s own accounting requirements may be retained by them separately.

6. Your rights

Under Jersey and UK data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (you can edit your account details directly)
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at privacy@yum.je.

7. Cookies

We use essential cookies to keep you logged in and remember your cart and theme preference — see our Cookies Policy for full details.

8. Security

Passwords are hashed (never stored or logged in plain text), session cookies are encrypted and httpOnly, and access to restaurant and admin data is scoped so no one can see data outside their own account.

9. Changes to this policy

If we make material changes to this policy, we’ll update the “last updated” date above and, where appropriate, notify you directly.

10. Contact

Questions about this policy or your data? Email privacy@yum.je.