Coriander Restaurant App Privacy Policy

Effective date: 12 June 2026 App: Coriander Restaurant
Website: https://corianderrestaurants.co.uk
Target availability: United Kingdom, United States, Australia

This Privacy Policy explains how Coriander Restaurant collects, uses, stores, and shares information when you use the Coriander Restaurant mobile app.

1. Who We Are

Coriander Restaurant is a mobile ordering app for restaurant menu browsing, offers, cart checkout, order updates, saved address features, customer accounts, and restaurant notifications.

Legal business name: CORIANDER RESTAURANT LTD
Business address: 485 Barlow Moor Road, Manchester, England, M21 8AG
Privacy contact email: info@corianderrestaurants.co.uk
Privacy contact phone: +44 161 881 0340

For privacy questions, data access requests, correction requests, deletion requests, or complaints, contact us using the details above.

2. Information We Collect

We collect information you provide directly, information generated when you use the app, and information needed to process orders through our restaurant website and WooCommerce store.

Information you provide

• Name, email address, and phone number.
• Delivery and billing address details.
• Order information, including menu items, quantities, order notes, coupons, fees, totals, delivery or collection method, and order status.
• Saved address information, if you choose to save address details.
• Support or communication details if you contact us.

Information collected automatically

• Device and app information, such as platform, app version, install ID, session identifier, and basic technical diagnostics.
• Push notification information, such as push token, platform, notification status, notification delivery logs, and notification interaction data.
• Cart and checkout state needed to keep your basket, delivery method, fees, totals, and checkout flow working correctly.

Payment information

The app may show payment options and order payment status. We do not intentionally store full card numbers or card security codes in the mobile app. Payment processing is handled by the restaurant website, WooCommerce, and configured payment providers. Those providers may process payment information under their own privacy policies and security terms.

3. How We Use Information

We use personal information to:

• Show menus, categories, products, prices, offers, banners, and restaurant contact details.
• Create and manage your cart, checkout, delivery, collection, and order experience.
• Process, confirm, and manage restaurant orders.
• Send order updates, service messages, promotional offers, and app notifications when permitted.
• Manage customer accounts, saved addresses, login, and password-related flows.
• Provide customer support and respond to requests.
• Improve app reliability, diagnose errors, prevent abuse, and protect app security.
• Comply with applicable legal, tax, accounting, consumer protection, and regulatory obligations.

4. Push Notifications

If you allow push notifications, we may send:

• Order status updates.
• Service and account messages.
• Restaurant offers, coupons, and promotional messages.
• Trigger-based messages, such as app open, account login, order placed, order threshold, inactive customer, or custom workflow notifications.

You can disable push notifications in your device settings at any time. Some service messages may still appear inside the app where needed for order or account functionality.

5. Local Storage

The app and connected website may use local storage, tokens, session identifiers, cart tokens, saved checkout form data, and similar technologies to:

• Keep you logged in.
• Preserve cart and checkout data.
• Remember saved addresses and delivery choices.
• Register the device for push notifications.
• Improve app functionality and reliability.

Some information may be stored locally on your device. You can remove local app data by clearing the app data or uninstalling the app.

6. How We Share Information

We share information only where needed to provide the app and restaurant services, comply with law, or protect our rights.

We may share information with:

• The restaurant/operator responsible for fulfilling your order.
• WooCommerce, WordPress, hosting providers, and website service providers.
• Payment providers configured by the restaurant website.
• Delivery, collection, or fulfilment providers where applicable.
• Push notification providers, including Expo, Firebase Cloud Messaging, and Apple Push Notification service.
• Email, support, analytics, diagnostics, security, and infrastructure service providers used to operate the app.
• Legal, regulatory, tax, accounting, or law enforcement authorities where required.

We do not sell your personal information for money. We do not use personal information for third-party tracking or cross-app advertising.

7. Legal Bases for UK Users

For users in the United Kingdom, we process personal data under one or more of the following legal bases:

• Contract: to provide ordering, checkout, account, delivery, collection, and customer service features.
• Consent: for optional push notifications, marketing messages where required, and optional saved information.
• Legitimate interests: to operate, secure, improve, and prevent misuse of the app and restaurant services.
• Legal obligation: to keep order, tax, accounting, compliance, and dispute records where required.

8. International Data Transfers

Your information may be processed in the United Kingdom, United States, Australia, or other countries where our service providers operate. Privacy laws in those countries may differ from your country of residence.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, service provider agreements, and data protection terms offered by our providers.

9. Data Retention

We keep personal information only as long as needed for the purposes described in this policy, including:

• Order and transaction records needed for restaurant operations, tax, accounting, legal, and dispute purposes.
• Account and saved address information while your account remains active or until you delete the account, subject to legal retention needs.
• Push notification device records while the app install remains active or until the token becomes inactive, is deleted, or you request removal.
• Support and diagnostic records for as long as reasonably needed to resolve issues and protect the service.

When information is no longer needed, we delete it, anonymize it, or retain it only where legally required.

10. Account Deletion

Registered customers can permanently delete their account from within the app:

1. Open Account.
2. Select Delete account.
3. Review the deletion notice and confirm the request.

Account deletion is permanent and cannot be undone. When deletion is confirmed:

• The WordPress and WooCommerce customer account is deleted.
• Login credentials, account profile data, saved addresses, authentication tokens, and customer-linked app notification records are removed or disconnected from the deleted account.
• The user is signed out and account-related information stored locally by the app is cleared.
• The user may continue using the app as a guest or create a new account later.

Deleting an account does not necessarily delete completed or historical order and transaction records. Existing orders are disconnected from the deleted customer account and retained as guest order records where needed for restaurant operations, tax, accounting, fraud prevention, payment disputes, chargebacks, consumer protection, or other legal obligations. These retained records may include the name, email address, phone number, billing or delivery address, purchased items, totals, payment method, and transaction details originally supplied with the order.

Retained order records are not used to keep the deleted customer account active. They are kept only for the applicable legal or operational retention period and are then deleted or anonymized where appropriate.

Account deletion does not uninstall the app. A device-level installation identifier and non-account app settings may remain so the app can continue operating in guest mode. Users can remove local device data by clearing the app's data or uninstalling the app, and can disable notifications through device settings.

If account deletion cannot be completed, the app displays an error and the account remains active. Users may retry or contact us using the details in Section 16.

11. Your Privacy Rights

Depending on where you live, you may have rights to:

• Know what personal information we collect, use, disclose, or share.
• Access a copy of your personal information.
• Correct inaccurate personal information.
• Request deletion of personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Opt out of certain marketing communications.
• Complain to a privacy regulator.

United Kingdom

UK users may have rights under the UK GDPR and Data Protection Act 2018, including access, rectification, erasure, restriction, objection, data portability, and the right to complain to the Information Commissioner's Office.

ICO website: https://ico.org.uk/

Australia

Australian users may have rights under the Privacy Act 1988 and the Australian Privacy Principles. You may request access to or correction of your personal information and may complain to us or the Office of the Australian Information Commissioner.

OAIC website: https://www.oaic.gov.au/

United States

US users may have privacy rights depending on their state, including rights to access, delete, correct, or opt out of certain uses of personal information. We do not knowingly sell personal information. If you are a resident of a state with applicable privacy rights, contact us using the details in this policy.

12. Children

The app is intended for restaurant customers and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the app, contact us and we will take appropriate steps to delete it.

If local law requires a higher age threshold for consent, users under that threshold should use the app only with permission from a parent or guardian.

13. Security

We use reasonable technical and organizational measures to protect personal information, including secured API access, authentication controls, provider security measures, and operational safeguards.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials and device secure.

14. Third-Party Links and Services

The app may link to the restaurant website, booking pages, map services, payment services, or other third-party websites and services. Their privacy practices are governed by their own privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy when app features, legal requirements, or data practices change. The updated policy will show a new effective date. If required, we will provide additional notice or request consent.

16. Contact

For privacy questions or requests, contact:

Coriander Restaurant
485 Barlow Moor Road, Manchester, England, M21 8AG
Email: info@corianderrestaurants.co.uk
Phone: +44 161 881 0340