Privacy Policy

Last updated: 11 August 2026

This privacy notice explains how Ali Tandoori Express collects and uses your personal information when you visit our website, place an order, use your account or contact us. We have written it in plain language so you can understand what happens to your information and the choices available to you.

Who we are

Ali Tandoori Express is the data controller for personal information collected through alitandooriexpress.co.uk and our online ordering service.

You can contact us at:

• Address: 100 Harvey Lane, Norwich NR7 0AQ
• Email: contact@alitandooriexpress.co.uk
• Telephone: 01603 300 002

Information we collect

The information we collect depends on how you use the website. It may include:

• Order and delivery information: your name, email address, telephone number, billing or delivery address, postcode, chosen dishes, prices, order notes, delivery or collection preference and order status.
• Account information: your login details, saved addresses, profile information and order history. Passwords are stored in a protected form and are not visible to us.
• Payment information: payment status, payment method and transaction or provider reference. Card and account credentials are entered into the secure systems of our payment providers; we do not store your full card number or card security code.
• Messages and support information: information you include in a contact form, email, telephone call or request for help.
• Technical and usage information: IP address, device and browser information, approximate location derived from your IP address, website activity, security logs, cookie identifiers and your cookie choices.

Allergy and dietary information

If you choose to include allergy, dietary or other health-related details in an order note, we use that information only to respond to your request and prepare or discuss your order. Because this information can be sensitive, please provide only what is necessary. For a serious allergy, contact us directly before ordering so our team can discuss your requirements.

How and why we use your information

We use personal information only where we have a lawful reason to do so:

• To perform our contract with you: taking and preparing your order, arranging collection or delivery, processing payment, sending order updates, managing your account and providing customer support.
• To meet legal obligations: keeping accounting and tax records, responding to lawful requests and handling legal claims or food-safety matters.
• For our legitimate interests: protecting the website and our customers from fraud or misuse, diagnosing technical problems, improving our service and keeping appropriate business records. We consider your rights before relying on this basis.
• With your consent: using non-essential analytics or marketing technologies where consent is required. You may withdraw consent at any time without affecting earlier lawful use.
• For sensitive information you ask us to use: responding to allergy or dietary instructions you deliberately provide, where data protection law allows us to do so.

We do not use your information for solely automated decisions that produce legal or similarly significant effects.

Who we share information with

We share only the information needed for the relevant purpose. Recipients may include:

• our authorised team members, kitchen staff and delivery personnel;
• website hosting, security, email and technical-support providers;
• WooCommerce and related service providers that support our online shop;
• Stripe and PayPal when you choose their payment services;
• Google services used for site measurement, diagnostics or maps, depending on your settings and consent; and
• professional advisers, regulators, courts, law-enforcement bodies or other authorities where disclosure is necessary or legally required.

We do not sell your personal information.

International data transfers

Some technology and payment providers may process information outside the United Kingdom. Where this happens, we require an appropriate legal safeguard, such as a UK adequacy regulation, the UK International Data Transfer Agreement or an approved contractual addendum, unless another lawful exception applies. You can contact us if you would like more information about a relevant safeguard.

How long we keep information

We keep personal information only for as long as it is needed for the purposes described above. In general:

• order, payment-reference and invoice records are normally kept for up to six years to meet accounting, tax and legal requirements;
• account information is kept while the account remains active and for a reasonable period afterwards;
• general contact enquiries are normally kept for up to 12 months, unless they relate to an order, complaint or legal matter that requires longer retention;
• security and technical logs are kept for a limited period appropriate to investigating problems and protecting the service; and
• payment providers keep information under their own retention policies.

We may keep information longer when required by law, when a dispute is ongoing or when it is needed to establish, exercise or defend a legal claim. When information is no longer required, it is deleted or anonymised.

Cookies and similar technologies

Our website uses strictly necessary cookies and local storage to remember your basket, maintain checkout and account sessions, protect forms and keep the site working securely. These technologies are necessary to provide the service you request.

The website may also use Google measurement tools to help us understand website performance and improve the customer experience. Non-essential analytics or advertising technologies require consent where applicable. You can use any cookie controls shown on the website and can also block or delete cookies in your browser settings. Blocking necessary cookies may prevent the basket, checkout or account features from working correctly.

Links, maps and social media

Our website contains links to Google Maps and social-media services. If you open a link or interact with third-party content, that provider may receive information such as your IP address and device details and will handle it under its own privacy notice. We are not responsible for the privacy practices of third-party websites.

How we protect information

We use appropriate technical and organisational measures designed to protect personal information from accidental loss, unauthorised access, alteration or disclosure. Access is limited to people and providers who need the information for their work. No internet service can be guaranteed completely secure, but we review and improve our safeguards as needed.

Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct incomplete or inaccurate information;
• ask us to delete information or restrict how it is used;
• receive certain information in a portable format;
• object to processing based on legitimate interests or to direct marketing; and
• withdraw consent where we rely on consent.

These rights are not absolute and an exemption may apply. To make a request, email contact@alitandooriexpress.co.uk. We may ask for information needed to confirm your identity. We normally respond within one month.

Children

Our online ordering service is intended for adults. We do not knowingly ask children to create accounts or place orders without the involvement of a parent or guardian.

Changes to this notice

We may update this privacy notice when our services, providers or legal obligations change. The latest version will always appear on this page with the date it was last updated.

Contact us

For privacy questions or requests, email contact@alitandooriexpress.co.uk, call 01603 300 002, or write to Ali Tandoori Express, 100 Harvey Lane, Norwich NR7 0AQ.