Grubify
Get Started

Legal

Privacy Policy

Last updated: 3 October 2026

Who we are

Grubify Ltd ("Grubify", "we") provides online ordering software to independent restaurants. Registered in England and Wales, company number 15365780. Contact: hello@grubify.co.uk.

Two roles

  • For our own business (website visitors, restaurant owners and staff, people who contact us), we are the controller and this policy applies.
  • When you order food from a restaurant using Grubify, the restaurant is the controller of your order data and we process it on their behalf. Please read that restaurant's Privacy Notice, linked in the footer of its ordering site. The exception is the service charge you pay Grubify at checkout, covered in the table below.

What we collect and why

Personal data we collect, why, and the lawful basis
WhoDataWhyLawful basis
Restaurant owners and staffName, business name, email, phone, address, login details, billing detailsTo provide the service, set up accounts, bill and support youContract
Prospective customersName, business name, email, phone, messagesTo reply and tell you about GrubifyLegitimate interests
Website visitorsIP address, device and browser details, pages visitedTo run and secure the site; analytics only with consentLegitimate interests; consent for analytics
End customers paying a service chargeName, email, order and payment referenceTo charge and account for the service charge, handle queries and prevent fraudContract; legal obligation (tax records)

We don't sell personal data. We only send business marketing emails you can opt out of at any time.

Who we share it with

Only service providers who help us run Grubify, under contract: hosting (Vercel), payments (Stripe), email (Resend), security (Google reCAPTCHA) and accounting. We may share data if required by law.

International transfers

Where a provider stores data outside the UK, we use a recognised safeguard such as UK adequacy regulations or the UK International Data Transfer Addendum.

How long we keep it

  • Account and billing records: for the contract, then 6 years for tax and legal purposes.
  • Enquiries from prospects: up to 2 years after last contact.
  • Analytics data: 14 months.

Cookies

We use essential cookies to run the site. With your consent, we use analytics and advertising cookies (Meta Pixel) to understand visits and measure our ads. You can accept or reject these in our cookie banner and change your choice at any time.

Your rights

You can ask to access, correct or delete your data, object to or restrict how we use it, or ask for a copy to move elsewhere. Where we rely on consent, you can withdraw it at any time. Email hello@grubify.co.uk and we'll respond within one month.

If you're unhappy, please contact us first. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Changes

We'll post any changes here and update the date above.