At Renoj Eat, your privacy matters. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).
Who we are
Renoj Eat Ltd is the data controller for personal data collected through our website and mobile app. If you have any questions about this policy or how we handle your data, you can contact our Data Protection Officer at [email protected].
What data we collect
We collect information you provide directly — such as your name, email address, phone number, delivery addresses and payment details when you register or place an order. We also collect data automatically when you use our platform, including your IP address, device type, browser, pages visited, search queries and order history. Where you give permission, we may collect your precise location to show nearby restaurants and estimate delivery times.
How we use your data
We use your data to process and deliver your orders, manage your account, send order confirmations and delivery updates, personalise your experience (including recommended restaurants and deals), improve our platform through analytics, prevent fraud and ensure platform security, and comply with our legal obligations. We may also send you marketing communications about offers and new features — you can opt out at any time in your account settings or by clicking unsubscribe in any email.
Legal basis for processing
We process your data on the following legal bases: contract performance (to fulfil your orders), legitimate interests (to improve our service and prevent fraud), legal obligation (to comply with applicable law), and consent (for marketing communications and precise location data). Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
Sharing your data
We share your data with restaurant partners to fulfil your orders, delivery drivers to complete deliveries, payment processors to handle transactions securely, and technology providers who help us operate the platform (such as cloud hosting and analytics services). All third parties are contractually required to handle your data in accordance with UK GDPR. We do not sell your personal data to third parties for their own marketing purposes.
Cookies and tracking
We use cookies and similar technologies to keep you logged in, remember your preferences, analyse how our platform is used, and show relevant offers. You can manage your cookie preferences through the cookie banner on your first visit or at any time via your browser settings. Strictly necessary cookies cannot be disabled as they are essential for the platform to function.
Data retention
We retain your account data for as long as your account is active. If you close your account, we delete or anonymise your personal data within 90 days, except where we are required to retain it for legal or regulatory purposes (for example, financial records which we keep for 7 years). Order history may be retained in anonymised form for analytics.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data (the 'right to be forgotten'), restrict or object to certain processing, receive your data in a portable format, and withdraw consent at any time. To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Data security
We use industry-standard security measures including encryption in transit (TLS) and at rest, access controls, regular security audits and staff training to protect your personal data. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected users without undue delay.
International transfers
Some of our technology providers are based outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place — such as UK adequacy regulations or standard contractual clauses — to protect your data to the same standard as within the UK.
Children's privacy
Our platform is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete it promptly.
Changes to this policy
We may update this privacy policy from time to time. When we make significant changes, we will notify you by email or via a notice on the platform. The date at the top of this page always reflects the most recent version. Continued use of Renoj Eat after changes are posted constitutes acceptance of the updated policy.
Contact us
If you have any questions, concerns or requests relating to your privacy, please contact our Data Protection Officer at [email protected] or write to us at Renoj Eat Ltd, 20 Finsbury Street, London, EC2Y 9AQ, United Kingdom.
Privacy questions?
Email our Data Protection Officer at [email protected]. We respond within 30 days.