Privacy Policy

Information we collect

• Name and contact details.
• Email address, where used for account access, receipts, or support.
• Phone number for order updates, delivery contact, and failed delivery support.
• Delivery address, including building name, flat number, street, postcode, and delivery notes.
• Order details, basket contents, prices, fulfilment method, order status, and order history.
• Payment metadata, including payment status, checkout reference, transaction reference, amount, currency, and fraud-prevention records.
• Device, app, and session data needed for security, diagnostics, crash investigation, and app reliability.
• Push notification tokens used to send order updates and account/service messages.
• Approximate location, address validation, route, and delivery-zone information where required to assess local delivery availability.

How we use your information

• To create, manage, and secure your Prawn Hub account.
• To process orders, confirm payment status, and pass accepted orders to the kitchen.
• To validate collection and local delivery availability.
• To contact you about order status, delivery problems, refunds, cancellations, or support requests.
• To send push notifications about payment confirmation, accepted orders, preparation, ready-for-collection, delivery, cancellation, or other service updates.
• To prevent fraud, duplicate payments, unauthorised access, and abuse of the platform.
• To maintain audit logs required for payment, order, tax, legal, and operational records.
• To improve app reliability, performance, and customer support.

Payments

Payments in the Prawn Hub app are processed by SumUp. Prawn Hub does not store your full card number, card expiry date, or card security code.

Prawn Hub stores limited payment metadata returned by the payment provider so orders can be reconciled, refunded where appropriate, audited, and protected against duplicate or abandoned checkouts.

Service providers

We use trusted service providers to run the app and fulfil orders. These may include Supabase for database, authentication, storage, and backend infrastructure; SumUp for payments; Expo, FCM, and APNs for push notifications; and mapping or address-validation providers where delivery validation or routing is required.

Data retention

Account data is kept while your account remains active. Order, payment, refund, tax, fraud-prevention, and legal records may be retained for longer where required for business, accounting, legal, dispute, or regulatory reasons.

Your rights

Under UK data protection law, you may request access, correction, deletion, restriction, portability, or objection in relation to your personal data, subject to legal and operational limits.

To request account deletion, use the instructions on the Delete Account page.

Security

We use technical and organisational measures designed to protect customer and order data. No internet-based service can be guaranteed to be completely secure, so we also monitor for errors, abuse, and unauthorised access.

Contact

For privacy questions or data requests, contact Prawn Hub support at prawnhubburger@gmail.com.