Privacy policy

Who is responsible for your data

STRKK LTD, registered in England and Wales (company number 13503997), 86-90 Paul Street, London, England, EC2A 4NE, is the controller for your Munchabout account and for running the marketplace. We're registered with the Information Commissioner's Office as a data controller, registration number ZC279052. Restaurants are separate businesses: when you order, the restaurant receives the details it needs to prepare and deliver your order and is responsible for its own use of them. Contact us at [email protected].

What we collect

• Account details: your name, email address, phone number and password (stored hashed).
• Addresses you save, with delivery instructions.
• Orders: what you ordered, from where, when, the amounts and the order chat.
• Payment details: card details are collected and held by our payment provider, Stripe. We see only the card type and last four digits.
• Ratings and reports you submit.
• Device information needed to send push notifications.
• For restaurant staff using driver mode: location, but only while a delivery is in progress.
• Waitlist: if you join the waitlist, your email address, kept only to tell you when Munchabout launches. Email [email protected] and we'll delete it.

Why we use it

• To take and fulfil your orders, which is the contract between us (and between you and the restaurant).
• To keep the service safe: preventing fraud, handling disputes and moderating ratings and messages (our legitimate interests).
• To find and fix faults in our apps, website and servers using error and crash reports (our legitimate interests).
• To meet legal obligations, such as keeping transaction records.
• To send service messages about your orders. Marketing emails only if you opt in, and you can opt out at any time.

Driver location

Drivers are employed by the restaurant, not by Munchabout. When a driver starts a delivery, the partner app shares their location so the diner can follow the order. Sharing stops when the delivery is completed. We use this location for live tracking on behalf of the restaurant, and to help resolve disputes about an order. We delete it 30 days after the delivery.

Who we share it with

• The restaurant you order from: your name, the order, your delivery address and phone number.
• Stripe, which processes payments on the restaurant's account.
• Service providers that host our systems, protect and deliver the website (Cloudflare), measure how the site is used and which of our Google ads led to a visit (Google Analytics and Google Ads, only if you accept cookies on munchabout.com), and send emails and push notifications, under contracts that limit their use of your data.
• Sentry (Functional Software, Inc.), in its EU region: error and crash reports from our apps, website and servers, with personal details stripped, so we can find and fix faults.
• Authorities, where the law requires it.

We do not sell personal data. If you accept cookies on munchabout.com, Google may use what it learns from your visit to measure and personalise our ads; see our cookie policy.

How long we keep it

Account data is kept while your account is open. Order records are kept for as long as tax and accounting rules require, with personal details removed when you delete your account. Driver location is deleted 30 days after the delivery.

Your rights

You can access, correct, export or delete your data, object to some uses and complain to the Information Commissioner's Office (ico.org.uk). You can delete your account from your account settings at any time. To exercise any right, email [email protected].