Privacy notice
This notice explains how Mangal by Lezzet, trading as The Mangal, uses personal information when you order, create an account, contact us or choose to receive offers.
Who is responsible
The Mangal is the data controller for the information described here. Contact us at info@themangal.uk, call 0191 266 2444, or write to The Mangal, Front Street, Four Lane Ends, Newcastle upon Tyne, NE7 7XE.
What we collect
- Order details, your name, phone number, email address, delivery address and notes you choose to provide.
- Account details, saved addresses, order history, rewards and marketing preferences.
- Payment references and payment status. Stripe processes card details; The Mangal does not receive or store full card numbers.
- Push-notification tokens and limited technical/error records needed to deliver updates and keep the service reliable.
Please do not put medical information or other sensitive personal information in order notes. Contact the restaurant directly about allergies.
Why we use it
- To take, prepare, deliver, collect, support and account for your order. This is necessary to perform our contract with you.
- To prevent fraud, secure the service, diagnose failures and manage the business. We rely on legitimate interests where those interests do not override your rights.
- To meet tax, accounting, food-safety and other legal obligations.
- To send offers only where you have chosen this or where the law otherwise permits it. You can opt out at any time without affecting order messages.
Who receives it
Authorised restaurant staff and delivery staff receive only what they need to fulfil the order. Service providers may process information for us, including Firebase/Google Cloud for authentication, database and notifications; Stripe for payments; Apple and Google for push delivery; and our hosting and email providers. They act under their own terms and/or our processor arrangements. We do not sell customer information.
International processing
Some technology providers may process information outside the UK. Where this happens, we require an appropriate legal transfer mechanism and relevant safeguards from the provider.
How long we keep it
Diagnostic and crash records are normally deleted after 30 days. Account information is kept while your account is active and then deleted or anonymised when no longer needed. Operational contact, address and free-text order data is normally removed from completed or cancelled orders after 90 days. A reduced transaction record may be retained for up to six years where needed for tax, accounting, disputes or legal obligations. Marketing suppression records may be retained so we can respect an opt-out.
Your choices and rights
You may ask for access, correction, deletion, restriction, portability, or object to certain uses. Some rights depend on the circumstances and legal retention duties. You can change marketing preferences in your account or contact info@themangal.uk. We may need to verify your identity before responding.
If you are unhappy with how we use your information, please contact us first. You also have the right to complain to the Information Commissioner's Office.
Security and changes
We use encrypted connections, access controls, short-lived authentication tokens, restricted server credentials and security monitoring. No online service can promise absolute security. We review this notice when our services or legal obligations change.