Privacy Policy

1. Who we are

DishGo is a trading name of COMPERA LTD, a company registered in England and Wales with company number 12265681.

Our registered office is at 284 Chase Road A Block 2nd Floor (Take Account), London, England, N14 6HF. You can contact us about privacy matters at privacy@dishgo.uk or by phone at +44 7503 695000.

We operate the DishGo platform, which enables takeaway restaurants to create online ordering pages and allows customers to place orders directly with those restaurants.

2. What this policy covers

This privacy policy explains how we collect, use, store, and share personal data when you use the DishGo website, platform, and services. It applies to:

• Business users who register and manage a restaurant on the platform
• Customers who place orders through DishGo-powered storefronts
• Visitors who browse the website or marketing pages

3. Personal data we collect

Business users

When you register as a business, we collect:

• Account details — name, email address, password
• Business information — restaurant name, address, phone number
• Payment details — Stripe Connect account information for receiving payments
• Menu and operational data — menu items, prices, images, opening hours
• Usage data — how you interact with the dashboard and platform features

Customers

When you place an order, we collect:

• Contact details — name, email address, phone number
• Delivery address (for delivery orders)
• Order details — items ordered, amounts, fulfillment mode
• Payment information — processed securely by Stripe; we do not store full card details

Website visitors

When you browse the site, we may collect:

• Device and browser information
• IP address
• Pages visited and usage patterns
• Cookies and similar technologies (see our Cookie Policy)

4. How and why we use your data

We process personal data for the following purposes:

To provide the service (contractual necessity)

• Creating and managing business accounts
• Processing and fulfilling orders
• Facilitating payments between customers and restaurants
• Communicating order updates and confirmations

To operate and improve the platform (legitimate interests)

• Maintaining platform security and preventing fraud
• Analysing usage to improve features and performance
• Providing customer and business support

To comply with legal obligations

• Tax and financial reporting requirements
• Responding to lawful requests from authorities

With your consent

• Sending marketing communications (where consent is obtained)
• Setting non-essential cookies (see our Cookie Policy)

5. Who we share data with

We share personal data with:

• Restaurants — customer order details and contact information are shared with the restaurant fulfilling the order
• Stripe — our payment processor, which handles all card transactions securely under its own privacy policy
• Supabase — our hosting and database infrastructure provider
• Vercel — our website hosting provider

We do not sell personal data. We only share data with third parties where necessary to provide the service, comply with the law, or with your consent.

6. Data retention

We retain personal data for as long as needed to provide the service and fulfil the purposes described in this policy:

• Business accounts — retained while the account is active, plus a reasonable period after closure for legal and financial records
• Order data — retained for up to 7 years for tax and accounting compliance
• Customer contact details — retained for the duration needed to fulfil the order and handle any follow-up, then deleted or anonymised
• Website analytics — retained in anonymised or aggregated form

7. Cookies and similar technologies

We use cookies and similar technologies to operate the platform and improve your experience. For full details, including the types of cookies used and how to manage your preferences, please see our Cookie Policy.

8. International transfers

Our primary infrastructure is hosted within the EU/EEA. Where data is processed outside the UK or EEA (for example, by third-party service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, in line with UK GDPR requirements.

9. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Object to or restrict certain processing
• Request data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at privacy@dishgo.uk. We will respond within one month.

10. Children

DishGo is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Complaints

If you are unhappy with how we handle your personal data, please contact us first at privacy@dishgo.uk and we will do our best to resolve your concern.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection authority:

• Website: ico.org.uk
• Phone: 0303 123 1113

12. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated through the platform or by email where appropriate. The “Last updated” date at the top of this page indicates when it was most recently revised.

13. Contact us

For privacy-related enquiries:

• Email: privacy@dishgo.uk
• Phone: +44 7503 695000
• Post: COMPERA LTD, 284 Chase Road A Block 2nd Floor (Take Account), London, England, N14 6HF