Your data
What we know about you, and what we do with it
We're a small kitchen in Grays. We hold what we need to cook your food, get it to your door and keep the books straight — and no more than that. This page says exactly what that means, in plain terms.
Who's responsible
Niito's Kitchen is a sole trader business based at 46 Godman Road, Chadwell St Mary, Grays, Essex RM16 4SJ. That means one person is the data controller here, and that person answers your emails. There is no department to be passed between.
For anything on this page — a copy of your data, a correction, a deletion, or a complaint — write to hello@niitoskitchen.com.
What we hold, and why
Everything below is something you gave us or something an order produced. We don't buy lists, and we don't track you across other people's websites.
| What | Why we have it | How long |
|---|---|---|
| Your name, email and phone number | To take your order, send the receipt, and let the rider ring you when they can't find the door. | While your account is open |
| Saved addresses | So you don't type them again. You can delete any of them yourself, at any time. | Until you delete them |
| Allergies you've told us about | They're printed on the kitchen ticket for every order you place. This one is a safety matter, not a preference. | While your account is open |
| Your orders — what, when, how much | It's your history, and it's our sales record. HMRC expects a business to keep those. | Six years, then longer only as an anonymous figure |
| Payment card details | We never see them. Cards go straight to Stripe. All we're told is the brand and the last four digits, so you can recognise a saved card. | Until you remove the card |
| Reviews you write | Other customers read them when deciding what to order. | Published until you ask us to remove it |
| Notes and labels the kitchen writes about you | Things like "rings the bell twice" or "catering customer". Held about you, so yours to see — they're in the copy you can download. | While your account is open |
| Sign-in records — when, from where | So you can tell whether anyone else has been in your account, and so we can stop them if they have. | Seven days after the session ends |
| A basket you didn't check out | So it's still there when you come back, and so we know what people abandon. | Expires on its own |
| What you browsed — dishes opened, searches, where a checkout stopped | So we can see which dishes people look at and don't buy, what gets searched for that we don't cook, and where the checkout trips people up. Kept against a browser, not a name, unless you're signed in. | A year, then deleted |
| Guest details with no order behind them | Somebody started a checkout and stopped. Holding a stranger's name because they half-filled a form isn't a reason. | Deleted after 90 days |
| A record that you asked us not to email you | A one-way scramble of your address, so an unsubscribe survives even if we delete everything else about you. It can't be read back or written to. | Kept indefinitely — that's the point of it |
Why we're allowed to
- To do what you asked. Cooking and delivering an order needs your name, address and number. That's the contract.
- Because the law says so. Sales and VAT records have to be kept for six years, whatever anybody would prefer.
- Because it's reasonable and expected. Keeping the kitchen's own notes, showing published reviews, spotting fraud. If you disagree with any of it, say so and we'll look at it properly.
- Because you said yes. Marketing only. You can withdraw it in your account settings at any time, in one tap, and nothing else changes when you do.
Emails we send
Most of what we send is about an order you placed — the confirmation, the receipt, the message when it's on the road. Those aren't marketing and you can't turn them off, because an order with no receipt is worse for you than one more email.
Two things are marketing and both are optional. Weekly offers go to people who ticked the box. Basket reminders — a note four hours after you leave food in a basket without checking out — go to people who have ordered from us before, which the law allows for a business writing to its own customers about the same sort of thing they bought.
Every one of those carries an unsubscribe link that works on one click, with no sign-in. We send at most one reminder per basket, and none at all if you've ever asked us to stop.
What we don't do: sell your address, share it for anyone else's marketing, or send anything to somebody who has never ordered and never asked.
What we record about browsing
We record which dishes get opened, what gets searched for, and how far people get through the checkout. It's how we find out that a dish everyone looks at isn't selling, or that people keep searching for something we don't cook.
It's a short, fixed list of things — an event name, a dish from our own menu, a search term — and nothing else is accepted even if a page tried to send it. There's no advertising network involved, nothing that follows you to other websites, and no profile built about you as a person.
If you're signed in, it's linked to your account and is deleted along with everything else if you have your data erased. If you're not, it's linked to a browser and nothing more.
One thing this does feed: if you've kept opening a dish and never ordered it, we may show it to you on your account page. That's the whole of our "recommendations".
Leaving
There are two ways out and they're genuinely different. Most people want the first one.
Reversible
Close your account
You're signed out everywhere and we stop sending you anything. Nothing is deleted for thirty days.
Change your mind inside those thirty days and you just sign in again — addresses, favourites and order history exactly as you left them.
After thirty days it's deleted automatically, as below.
Permanent
Delete everything now
This is your right to erasure and we don't put a waiting period on it. Ask, and it happens — from your account settings, or by email if you'd rather.
There's no undo and nothing to restore afterwards. That's the point of it.
What we can't delete, and why
Deleting your account removes you from it. Three things stay, and it's fairer to say so than to leave you to find out:
- The sales record for orders you've already placed. The amounts, the dates and the dishes stay for six years because a business has to keep its books. Your name, number, address, note and allergies are stripped off them, so what's left is a transaction, not a person. We keep the outward part of the postcode — "RM17" — to work out how much we deliver to each area. That's a district of thousands of people.
- Reviews you published. The words stay, because other customers rely on them and a menu of reviews that vanish is no use to anybody. Your name comes off — it becomes "A customer". If you want the review gone entirely rather than anonymised, ask and we'll take it down.
- A note that you asked not to be marketed to. Only a one-way scramble of your email and number — not the addresses themselves, and nothing we could write to or read back. Without it, deleting you would destroy the proof that you'd unsubscribed, and we'd cheerfully start emailing you again next year.
Backups are the honest caveat. A deletion is done immediately in the live system; a copy may sit in an encrypted backup for a short while until that backup rolls over. It isn't used for anything in the meantime.
Who else sees any of it
We don't sell your data and we don't share it for anyone else's marketing. These are the services that handle it to make the site work, and each keeps its own records under its own policy — deleting your account here doesn't reach into theirs.
| Stripe | Takes the payment. Card details go to them, never to us. They keep their own transaction record for their own legal reasons. |
| Our email provider | Delivers receipts, order updates and password resets to your inbox. |
| Twilio | Sends the texts and WhatsApp messages about your order, if you've asked for those. They log the number and the message. |
| Only if you choose "sign in with Google". We're told your name, email address and a stable identifier — nothing else, and nothing about what you do elsewhere. |
What you can ask for
All of these are free, and we answer within a month. Most of them you can do yourself in your account settings without asking anybody.
- A copy of everything. One file, downloadable from your account, with every detail, order, review and sign-in we hold.
- A correction. If something's wrong, change it in your account or tell us.
- Deletion. As above — immediately, with the three exceptions we've named.
- To stop the marketing. One tap in your notification settings, or the unsubscribe link in any email.
- To object, or to have us pause. If you think we shouldn't be holding something, say so and we'll stop using it while we look into it.
- Your data in a portable form. The copy above is machine-readable, so you can take it elsewhere.
If you're not happy with how we've handled it
Tell us first. Email hello@niitoskitchen.com with "data complaint" in the subject line. We'll acknowledge it within 30 days and deal with it without unnecessary delay. You have a legal right to complain to us directly, and we'd rather you did.
If we don't put it right, you can take it to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You can go to them at any point — you don't have to come to us first.
Cookies, and what's stored in your browser
Three cookies, all of them things the site can't work without: one keeps you signed in, one stops another website submitting forms as you, and one lets guests see their own recent orders without an account.
Alongside those, your browser holds your basket, and a random number that groups one visit together so we can count people rather than clicks. Both are cleared when you close the tab or clear your browser, neither identifies you, and neither leaves this site.
There is no advertising cookie here, nothing shared with an ad network, and nothing that follows you to other websites.
Last updated 26 August 2026. If we change anything that matters, we'll say so here and email you if it affects an account you hold.