Privacy Policy
Last updated: 28 October 2026
This policy explains how Gofood.uk Online Ltd, trading as Gofood, a company registered in England and Wales (company number 12702164), whose registered office is at 240 Southwell Road East, Rainworth, Mansfield, England, NG21 0EQ ("Gofood", "we") uses personal data when you visit www.gofood.uk, sign up for or use the Gofood dashboard at app.gofood.uk, or contact us.
Gofood.uk Online Ltd is the data controller for the data described here. We are registered with the Information Commissioner's Office (registration number ZA938013).
If you ordered food from a restaurant
When you order from a restaurant's ordering website, the restaurant decides how your data is used and is the data controller. Gofood only processes it on the restaurant's behalf, under a data processing agreement. Please read that restaurant's own privacy policy, linked at the bottom of its website, and contact the restaurant about your data. If you contact us instead, we will pass your request on to them.
What we collect
- Account details: your name, email address, password (stored scrambled, never in plain text) and two-step verification settings.
- Business details: restaurant name, registered business name, company and VAT numbers, address, phone number, opening hours and bank-account connection status through Stripe (we never see your full bank or card details).
- How you use the dashboard: logins, settings you change and support requests, kept for security and to help you.
- Billing details: plans, invoices and payments, handled through Stripe.
- Technical data: IP address, browser type and the pages you use, kept in server logs for security and fault-finding.
- Messages you send us by email or through the dashboard.
Why we use it, and our lawful basis
- To provide the Service and your account: performance of our contract with you.
- To bill you and keep accounting records: contract and legal obligation.
- To keep the Service secure, prevent fraud and fix faults: our legitimate interests.
- To send service messages, such as order alerts, daily summaries and important changes: contract.
- To send you news about Gofood features: legitimate interests for business contacts, and you can opt out at any time with the unsubscribe link.
- To meet legal requirements, such as tax and responding to lawful requests: legal obligation.
Who we share it with
We do not sell personal data. We share it only with the service providers that run the platform for us, under contracts that protect it:
- Supabase: database, logins and file storage.
- Vercel: website and app hosting.
- Stripe: card payments (on the restaurant's own Stripe account) and Gofood's billing.
- Resend: sending order and account emails.
- Google (Maps Platform): address lookup, maps and delivery zones.
- Twilio: sMS messages and phone lines, when the restaurant uses them.
- Sentry: error monitoring, when switched on.
We may also share data with professional advisers, with the police or regulators when the law requires it, or with a buyer if Gofood's business is sold (they would be bound by this policy).
Transfers outside the UK
Some providers store or access data outside the UK, for example in the European Economic Area or the United States. When they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum, so your data stays protected to UK standards.
How long we keep it
- Account and business details: while your account is open, then 30 days to let you export your data.
- Invoices and accounting records: 6 years, as tax law requires.
- Security logs: up to 12 months.
- Support messages: up to 2 years after the conversation ends.
Your rights
You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email support@gofood.uk. We will reply within one month.
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.
Security
Data is encrypted in transit, access is limited to people who need it, logins can be protected with two-step verification, and each restaurant's data is kept separate from other restaurants' data. Card details are handled only by Stripe.
Cookies
Our use of cookies is explained in our Cookie Policy.
Changes
We may update this policy. We will show the new date at the top and, for important changes, tell account holders by email.