Your data
Privacy & cookies
Last updated October 2026
Who we are
Nande Caribbean Restaurant Ltd, trading as Nandé Afro-Caribbean Kitchen, 15 Victoria Road, Romford RM1 2JT, is the controller of your personal data. You can reach us at nandecaribbean@aol.com or on 01708 897750.
What we collect and why
- Account details — your name, email address, phone number and a securely hashed password, so you can sign in and we can contact you about an order. Lawful basis: contract.
- Orders and bookings — what you ordered, delivery address, table reservations, catering enquiries and any allergy note you give us. Lawful basis: contract. An allergy note is health information; we use it only to prepare your order safely, on the basis of your explicit consent in giving it to us.
- Payments — card payments are taken by Stripe on its own secure page. We never see or store your card number; we keep only the amount, status and a payment reference. Lawful basis: contract.
- Accounting records — sales records are kept for six years as UK tax law requires. Lawful basis: legal obligation.
- Offers and news — only if you tick the box to opt in, and you can opt out at any time in My Account. Lawful basis: consent.
- Keeping the service secure — sign-in and staff audit logs. Lawful basis: legitimate interests.
Who we share it with
We do not sell your data. We share only what is needed with the companies that help us run the service:
- Stripe — card payments
- Our email and text message providers — order confirmations and updates
- Our hosting provider — running this website and its database
- postcodes.io — we send your postcode only (nothing that identifies you) to work out the delivery distance
- Our delivery driver — your name, address and phone number for that delivery
Some of these providers process data outside the UK. Where they do, the transfer is covered by UK-approved safeguards.
How long we keep it
Your account stays until you delete it. Order and payment records are kept for six years for tax purposes, then deleted. If you delete your account we remove your name, contact details, addresses and allergy notes straight away and keep only the anonymised sales record.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data — use My Account → Download my data
- correct anything that is wrong — edit it in My Account or contact us
- delete your data — use My Account → Delete my account
- stop sending you offers — switch off “Offers and news” in My Account
- restrict or object to how we use your data
We reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.