LEGAL

Privacy Policy

LAST UPDATED · 17 JUNE 2026

WRAPPER is operated by Arab Western Ltd ("we", "us"), a company registered in England & Wales with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the data controller for personal data collected through this site and are registered with the UK Information Commissioner's Office under the name Arab Western Ltd.

1. What this policy covers

This policy applies to everything on eatwrapper.lovable.app and any custom domain we use : general browsing of our marketing pages, using our contact form, placing a Click & Collect order, and signing up to marketing emails.

2. What we collect

When you browse the site: basic technical data : IP address, device and browser type, referring page : kept for up to 30 days for security and abuse prevention. We use strictly necessary cookies and localStorage (for example, to remember your bag). We do not use advertising or analytics trackers; if that ever changes we'll update this page and surface a cookie banner.

When you contact us: your name, email and message.

When you place a Click & Collect order: first name, mobile number, optional email, the items you ordered, the time and location of pickup, payment confirmation (your card details are handled by our payment processor, not us), and any allergy information you share.

3. Why we use it and the legal basis

To take and prepare your order, take payment, and tell you when it's ready : contract performance (UK GDPR Art. 6(1)(b)).
To text you order updates and send a receipt : contract performance. These messages are necessary for the service and are sent whether or not you opt in to marketing.
To recognise returning customers, remember preferences, and improve service : legitimate interests (Art. 6(1)(f)). You can object at any time by contacting us.
To respond to contact-form messages : legitimate interests.
To send you marketing emails about new menu items and offers : only if you tick the marketing box (consent, Art. 6(1)(a)). You can unsubscribe from every email or by contacting us.
To meet food safety, tax, and accounting obligations : legal obligation (Art. 6(1)(c)).

4. Who we share it with

Our payment processor (Stripe), our SMS provider (Twilio), our email provider (Resend), our hosting and database provider, and HMRC where required. We never sell your data. Some processors are based outside the UK; transfers rely on the UK International Data Transfer Addendum.

5. How long we keep it

Order and payment records for 6 years (HMRC). Contact-form messages for 24 months. Marketing contact details until you unsubscribe. Customer-recognition data (phone, order history) for up to 3 years after your last order, then deleted or anonymised. Browsing logs for up to 30 days.

6. Your rights

Access, rectification, erasure, restriction, portability, and objection. Email eatwrapper@gmail.com to exercise them. You also have the right to complain to the ICO (ico.org.uk).

7. Children

This site is not directed at under-16s. We don't knowingly collect their data.

8. Contact

Arab Western Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Email: eatwrapper@gmail.com.