Your privacy
What we collect when you order from us, why we need it, and how to get rid of it.
Last updated 24 September 2026
This site is run by Perilicious, 89 Penny Street, Lancaster, LA1 1XN. We decide what happens to the details you give us, which in the law's words makes us the data controller. If you want to ask us anything about this, or want your details removed, speak to us in the shop or call us — we'll sort it out.
What we collect
| What | Why we need it |
|---|---|
| Your name and phone number | So we can call you if there's a problem with the order, and so we know whose food it is at the counter. |
| Your address and postcode | Only if you choose delivery. We can't deliver without it. |
| Your email address | Only if you create an account — it's how you sign back in. |
| Your password | Scrambled the moment you type it, using a one-way process. We never store the password itself and nobody here can read it. |
| What you ordered, and when | To cook it, to take payment, and because HMRC require us to keep sales records. |
| Your loyalty points | To give you money off. |
That's the lot. We don't ask for your date of birth, we don't build a profile of you, and we don't track you around the internet.
Who else sees it
- Our hosting provider — they run the server your details sit on, and don't use them for anything of their own.
- Stripe — only if you pay by card. Your card number goes straight to them and never touches our server. They see your name and email to process the payment.
- Nobody else. We don't sell or share your details, and there are no advertising or analytics trackers on this site.
Cookies
One cookie, and only if you sign in: it keeps you signed in and holds nothing but a signed reference to your account. Your basket and delivery details are remembered in your own browser's storage on your device — they never leave it until you place an order.
No advertising cookies, no third-party trackers, and so nothing for you to click through on arrival.
How long we keep it
- Your account — until you ask us to delete it.
- Your name, phone and address on past orders — automatically wiped after 24 months. After that the order still exists as a sales record, but with no personal details attached to it.
- The sales figures — kept for at least six years, because tax law says so.
Deleting your account
Sign in, open Account, and use Delete my account. It's immediate and it isn't reversible. Your account disappears, your points go with it, and your name, phone number and address are stripped from every past order in the same moment.
The orders themselves stay on file as anonymous sales records, because we're legally required to keep them. They can no longer be connected to you.
Your rights
Under UK data protection law you can ask us to:
- tell you what we hold about you, and give you a copy
- correct anything that's wrong — you can edit your own details in your account
- delete it — use the button in your account, or ask us
- stop using it for something you're not happy with
Ask us and we'll do it within a month, free of charge.
Keeping it safe
The site runs over an encrypted connection. Passwords are stored scrambled and salted, so even we can't read them. Only staff with the manager PIN can see customer details, and the till itself needs a PIN before it shows anything at all.
Children
This site is meant for people aged 16 and over. We don't knowingly keep details for anyone younger — tell us if we have and we'll remove them.
Changes
If we change how any of this works, we'll update this page and change the date at the top.