Who we are
Rio's Pizza & Kebab House (8 Barnes Square, Clayton-le-Moors, Accrington, BB5 5NX) is the controller of the personal data you give when you order, book a table or join our offers. We decide why your data is used.
Chefzi runs this website, online ordering, the Rio's Pizza & Kebab House app and our order tablets for us. Chefzi acts as our processor: it stores and handles your data on our behalf and only on our instructions. It does not sell your data or use it for its own advertising.
What we collect
| Data | When | Why |
|---|---|---|
| Name, phone number, email address (optional) | When you place an order or book a table | To make and confirm your order, contact you about it and send your receipt |
| Delivery address and delivery instructions | Delivery orders only | To check we deliver to you, work out the delivery fee and deliver your food |
| Order details: dishes, notes, allergies you mention, time, totals, discounts, payment method and status | Every order | To prepare and hand over your order, handle refunds and keep our accounts |
| Card payments | If you pay online | Processed by Stripe. Card numbers are entered with Stripe and never reach us or Chefzi; we keep only the payment status and a Stripe reference |
| Marketing choices (email and SMS opt-in), loyalty points | Only if you opt in or use loyalty | To send offers you asked for and to give you rewards. You can opt out at any time with the link in every message |
| Table bookings: name, phone, party size, time, note | When you book | To hold your table |
| Technical data: IP address, browser or device type, pages requested | When you use the site or app | Security, fraud and abuse prevention and keeping the service running. We do not use advertising cookies or trackers |
How we use it, and our legal basis
- To take and deliver your order (performance of a contract with you).
- To keep financial and tax records (legal obligation).
- To prevent fraud, protect the service and handle complaints (legitimate interests).
- To send marketing emails or texts, only with your consent. Marketing emails come from Rio's Pizza & Kebab House's own address, never from a generic one.
Who we share it with
We never sell your personal data. We share it only with the service providers that run ordering for us, each under a contract that protects your data:
- Chefzi, our ordering platform (processor).
- Stripe for card payments.
- Google Cloud and Supabase for secure hosting and the database.
- Cloudflare for website delivery and security.
- Email and text-message delivery providers (such as Resend and Twilio) to send order updates, receipts and marketing you opted into.
- postcodes.io to look up a postcode for delivery (only the postcode is sent).
If a provider processes data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. We may also share data if the law requires it.
How long we keep it
Orders stay until this restaurant erases a diner or deletes the account. Automatic deletion is off. When you ask us to delete your data, your name, phone, email, address and order notes are removed from your orders and bookings. Anonymous order totals and dish lists are kept for our accounts, as the law requires.
Your rights
Under UK GDPR you can ask to see, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent for marketing at any time. We reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Deleting your data
The Rio's Pizza & Kebab House app
The app lets you browse the menu and order. You do not need to create an account or password. Details you type in (name, phone, email and address) are saved on your phone so you don't have to retype them, and they are sent to us only when you place an order. Uninstalling the app, or clearing its storage in your phone's settings, removes the details saved on your phone. To delete the order details we hold, use the deletion page.
Security
All traffic is encrypted with HTTPS. Access to restaurant data needs a signed-in account, and payment card data is handled only by Stripe.
Children
Ordering is not aimed at children under 13, and we do not knowingly collect their data.
Changes
If we change this policy we will update this page and the date at the top.
Contact us
- Address8 Barnes Square, Clayton-le-Moors, Accrington, BB5 5NX
- Platform (Chefzi)chefziofficial@gmail.com