Version 2026-01-01
Privacy policy
What we collect, why we collect it, how long we keep it, and how to get it back or have it deleted. No dark patterns, and nothing sold.
The short version
- We never see your card number. Our payment provider handles it.
- We do not sell your data, and we do not share it for advertising.
- Marketing is opt-in. Order updates are not marketing.
- You can download everything we hold or ask us to delete it.
What we collect
Because you gave it to us: your name, email address, phone number if you add one, delivery addresses, the notes you write on an order, your reviews, and your dietary and taste preferences if you set them.
Because you ordered: what you bought, when, how much it cost, which kitchen made it, and the receipt.
Because the app ran: a record of requests, for security and for finding faults. Your IP address is stored as a one-way hash, not in the clear, so a log cannot be read back as a list of addresses.
Because you verified something: if you use Campus Advantage, your institutional email address, stored encrypted and used only to keep that verification valid.
What we do not collect
Card numbers, bank details, your location beyond the address you type, your contacts, and anything from other apps on your device. There are no third-party advertising or analytics trackers on this site.
Why
- To sell you food. Taking the order, making it, delivering it, and handling a problem afterwards.
- Because we have to. Sales and tax records have to be kept for a statutory period.
- To keep the account safe. Rate limits, sign-in records, fraud checks.
- Because you said yes. Marketing emails and texts, and personalised recommendations. Both are off unless you turn them on, and both can be turned off again in one click.
Recommendations
If you turn personalisation on, we use what you have ordered and looked at to suggest dishes. Every suggestion tells you why it was suggested. No decision here affects your price, and turning it off stops it.
Who else sees it
Our payment provider, to take the payment. Our email and messaging providers, to send you confirmations. The courier, for a delivery — the address and a phone number, and nothing more. Our hosting and database providers, who hold the data on our behalf under contract. That is the list. We do not share your data with anyone for their own purposes.
How long we keep it
- Your account, for as long as you have one.
- Orders and receipts, for the statutory retention period, then reduced to the figures the books need.
- Security logs, for a limited window, and with the IP stored only as a hash.
- Carts you never checked out, for a short period, then deleted.
Your rights
You can see and correct your details, take a copy of everything, withdraw consent, and ask us to delete your account. Most of this is on your privacy page without needing to ask anyone.
When you ask for deletion, we delete your profile, addresses, preferences, reviews and points. Completed sales and their tax records stay for as long as the law requires, with your name removed where it is not needed for those records. We will not use anything we keep to contact you again.
Cookies
We use a session cookie to keep you signed in, a cookie to protect forms against cross-site request forgery, and a cookie to remember your basket. That is all. There are no advertising or tracking cookies, so there is no consent banner to click away.
Children
This is not a service for children. We do not knowingly create accounts for anyone under 16.
Getting in touch
Write to info@alariagan.com with any privacy question and a person will answer. If we get something wrong, tell us and we will fix it.
Last updated 2026-01-01. See also our terms and our accessibility statement.