Privacy Policy

App: Coriander Restaurant
Website: https://corianderrestaurants.co.uk
Effective date: 5 June 2026
Target availability: United States, United Kingdom, Australia

1. Who We Are

Coriander Restaurant is a mobile ordering app for restaurant menu browsing, offers, cart checkout, order updates, and customer account features.

Legal business name: CORIANDER RESTAURANT LTD
Business address: 485 Barlow Moor Road, Manchester, England, M21 8AG Privacy contact email: info@corianderrestaurants.co.uk Privacy contact phone: +44 161 881 0340

For privacy questions, data access requests, correction requests, deletion requests, or complaints, contact us using the details above.

2. Information We Collect

We collect information that you provide directly, information generated when you use the app, and information needed to process orders through our restaurant website and WooCommerce store.

Information you provide

Account details, such as name, email address, and phone number.
Delivery and billing details, such as address, postcode, country, and order contact information.
Order information, such as menu items, quantities, selected delivery or collection method, order notes, coupons, fees, totals, and order status.
Saved address information, if you choose to save address details for future checkout.
Support or communication details if you contact us.

Information collected automatically

Device and app information, such as platform, app version, install ID, session identifier, and basic technical diagnostics.
Push notification information, such as Expo push token, platform, notification status, notification delivery logs, and notification interaction data.
Cart and checkout state needed to keep your basket, delivery method, fees, totals, and checkout flow working correctly.

Payment information

The app may show payment options and order payment status. We do not intentionally store full card numbers or card security codes in the mobile app. Payment processing is handled by the restaurant website, WooCommerce, and any configured payment providers. Those providers may process payment information under their own privacy policies and security terms.

3. How We Use Information

We use personal information to:

Show menus, categories, products, prices, offers, banners, and restaurant contact details.
Create and manage your cart, checkout, delivery, collection, and order experience.
Process, confirm, and manage restaurant orders.
Send order updates, service messages, promotional offers, and app notifications when permitted.
Manage customer accounts, saved addresses, login, and password-related flows.
Provide customer support and respond to requests.
Improve app reliability, diagnose errors, prevent abuse, and protect app security.
Comply with applicable legal, tax, accounting, consumer protection, and regulatory obligations.

4. Legal Bases for UK Users

For users in the United Kingdom, we process personal data under one or more of the following legal bases:

Contract: to provide ordering, checkout, account, delivery, collection, and customer service features.
Consent: for optional push notifications, marketing messages where required, and optional saved information.
Legitimate interests: to operate, secure, improve, and prevent misuse of the app and restaurant services.
Legal obligation: to keep order, tax, accounting, compliance, and dispute records where required.

5. How We Share Information

We share information only where needed to provide the app and restaurant services, comply with law, or protect our rights.

We may share information with:

The restaurant/operator responsible for fulfilling your order.
WooCommerce, WordPress, hosting providers, and website service providers.
Payment providers configured by the restaurant website.
Delivery, collection, or fulfilment providers where applicable.
Push notification providers, including Expo, Firebase Cloud Messaging, and Apple Push Notification service.
Email, support, analytics, diagnostics, security, and infrastructure service providers used to operate the app.
Legal, regulatory, tax, accounting, or law enforcement authorities where required.

We do not sell your personal information for money. If any future feature involves targeted advertising, sale, or sharing as defined by applicable US state privacy laws, this policy and app disclosures must be updated before that feature is enabled.

6. Push Notifications and Offers

If you allow push notifications, we may send:

Order status updates.
Service and account messages.
Restaurant offers, coupons, and promotional messages.
Trigger-based messages, such as app open, account login, order placed, order threshold, inactive customer, or custom workflow notifications.

You can disable push notifications in your device settings at any time. Some service messages may still appear inside the app where needed for order or account functionality.

7. Cookies, Local Storage, and App Storage

The app and connected website may use local storage, tokens, session identifiers, cart tokens, saved checkout form data, and similar technologies to:

Keep you logged in.
Preserve cart and checkout data.
Remember saved addresses and delivery choices.
Register the device for push notifications.
Improve app functionality and reliability.

Some information may be stored locally on your device. You can remove local app data by clearing the app data or uninstalling the app.

8. International Data Transfers

Your information may be processed in the United Kingdom, United States, Australia, or other countries where our service providers operate. Privacy laws in those countries may differ from your country of residence.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, service provider agreements, and data protection terms offered by our providers.

9. Data Retention

We keep personal information only as long as needed for the purposes described in this policy, including:

Order and transaction records needed for restaurant operations, tax, accounting, legal, and dispute purposes.
Account and saved address information while your account remains active or until you request deletion, subject to legal retention needs.
Push notification device records while the app install remains active or until the token becomes inactive, is deleted, or you request removal.
Support and diagnostic records for as long as reasonably needed to resolve issues and protect the service.

When information is no longer needed, we delete it, anonymize it, or retain it only where legally required.

10. Your Privacy Rights

Depending on where you live, you may have rights to:

Know what personal information we collect, use, disclose, or share.
Access a copy of your personal information.
Correct inaccurate personal information.
Request deletion of personal information.
Object to or restrict certain processing.
Withdraw consent where processing is based on consent.
Opt out of certain marketing communications.
Complain to a privacy regulator.

United Kingdom

UK users may have rights under the UK GDPR and Data Protection Act 2018, including access, rectification, erasure, restriction, objection, data portability, and the right to complain to the Information Commissioner’s Office.

ICO website: https://ico.org.uk/

Australia

Australian users may have rights under the Privacy Act 1988 and the Australian Privacy Principles. You may request access to or correction of your personal information and may complain to us or the Office of the Australian Information Commissioner.

OAIC website: https://www.oaic.gov.au/

United States

US users may have privacy rights depending on their state, including rights to access, delete, correct, or opt out of certain uses of personal information. We do not knowingly sell personal information. If you are a resident of a state with applicable privacy rights, contact us using the details in this policy.

11. Children

The app is intended for restaurant customers and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the app, contact us and we will take appropriate steps to delete it.

If local law requires a higher age threshold for consent, users under that threshold should use the app only with permission from a parent or guardian.

12. Security

We use reasonable technical and organizational measures to protect personal information, including secured API access, authentication controls, provider security measures, and operational safeguards.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials and device secure.

13. Third-Party Links and Services

The app may link to the restaurant website, booking pages, map services, payment services, or other third-party websites and services. Their privacy practices are governed by their own privacy policies.

14. Changes to This Policy

We may update this policy when app features, legal requirements, or data practices change. The updated policy will show a new effective date. If required, we will provide additional notice or request consent.

Privacy Policy – Android App