Privacy policy

Last updated: 14 November 2026

This page explains what personal information Derby Eats collects when you use our websites and app or order food through us, how we use it, and your rights.

1. Who we are

Derby Eats is responsible for your personal information (the "controller"). Contact us at contact@derby-eats.co.uk or on 01332 327436.

2. What we collect

• When you order: your name, phone number, email address, delivery address, what you ordered and any notes you add. You need to give us your name, address and phone number to order. Without them we can't take or deliver your order.
• Payments: your card payment is handled by the payment provider of our ordering platform. We don't see or keep your full card details.
• When you contact us: your messages and notes of our calls, so we can help you.
• When you use our websites and app: technical information such as your device, browser and IP address.
• How you use Derby Eats: your order history, postcode or area, order times, cuisines and spend.
• If you sign up for news or offers: your email address and your choices.

3. How we use it, and why we're allowed to

• To take your order, pass it to the restaurant and take payment, and to send you updates about it by text or email. We need to do this to give you what you ordered (contract).
• To help when something goes wrong, and to handle refunds and complaints (contract, and our legitimate interest in looking after our customers).
• To check that orders are placed correctly, and to prevent fraud and misuse (legitimate interests).
• To keep accounts and tax records (legal obligation).
• To improve Derby Eats, for example by seeing which areas and restaurants people order from (legitimate interests).
• To send you marketing about Derby Eats offers (see section 4).
• To choose which offers to show you, and when (profiling, see section 5).
• To show you Derby Eats ads on social media (see section 6).

4. Marketing by email, text and app notifications

We send marketing by email, text and app notifications about Derby Eats offers.

• If you have ordered from us, we may send you offers for our own similar services. We rely on the "soft opt-in" (regulation 22 of the Privacy and Electronic Communications Regulations). We collected your details when you ordered. The offers are for our own similar services. You can opt out when you order and in every message.
• If you haven't ordered from us, we only send you marketing if you have agreed (consent).
• You can opt out or withdraw consent at any time, for free. Use the link in a message, reply STOP to a text, change your app settings, or email contact@derby-eats.co.uk.

5. Profiling for marketing

We use your order history, postcode or area, order times, cuisines and spend to choose which offers to send you, and when to send them. Our lawful basis is legitimate interests. You can object at any time (see section 9). This profiling does not make any decision that has legal or similarly significant effects on you.

6. Social-media ads

We may use your email address or phone number to show Derby Eats ads to you on platforms such as Facebook and Instagram. We may also use them to reach people who are similar to our customers. Our lawful basis is legitimate interests. You can object at any time (see section 9).

7. Who we share it with

We only share what each one needs:

• The restaurant that makes your food: your name, order, delivery address and phone number.
• Online ordering and delivery services that the restaurant uses: where we place your order through one of these, they get your order and delivery details so your food can be made and brought to you.
• Drivers who bring your order: your name, address and phone number.
• Our service providers, who work for us under contract: the ordering platform, payment processing, text messages, email, hosting, and an AI service that checks orders before they are paid for.
• Advertising platforms, for the ads in section 6.
• The police and other authorities, when the law requires it.

We never sell your personal information.

8. Information that leaves the UK

Some of our service providers and advertising platforms are based in, or use computers in, other countries such as the US. When your information goes outside the UK, we protect it with UK-approved safeguards, for example the UK government's approved contract terms.

9. Your rights

You can ask us to:

• give you a copy of your information (access)
• correct it
• delete it
• limit how we use it (restriction)
• send it to you or another company in a format a computer can read (portability)
• withdraw your consent, at any time, where we rely on it.

You can also object to us using your information where we rely on legitimate interests. You can object to marketing, including profiling and ads, at any time. For marketing this right is absolute: we will stop.

Email contact@derby-eats.co.uk. It's free, and we'll reply within one month.

If you're unhappy with how we've used your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.

10. How long we keep it

• Order and payment records: 6 years.
• Marketing data: until you opt out, or 3 years after your last order.
• Messages and call notes: 2 years.

After that we delete your information or make it anonymous.

11. Automated decisions

We don't make automated decisions that have legal or similarly significant effects on you.

12. Children

Derby Eats isn't meant for children under 13, and we don't knowingly collect their information.

13. Changes

We'll update this page if anything changes and change the date at the top. Please check it from time to time.