Privacy Policy

1. Controller

Smash Bones is the controller of personal data collected through this website for restaurant orders, event enquiries, customer accounts and related communications.

2. Personal Data We Collect

We may collect your name, email address, telephone number, order details, delivery or event address, payment references, account preferences, communication records and technical data such as device, browser and security logs.

3. Location Data

Customer location is used only when you press the location button. It is used once to help confirm your delivery address and check service area. We do not continuously track customer location after address confirmation.

4. Driver Location Data

Driver location is used while a driver is online or completing a delivery so Smash Bones and the customer can see operational delivery progress. Live tracking stops after completion or when the driver goes offline.

5. Lawful Bases

We process data to perform a contract with you, comply with legal obligations, protect legitimate business interests, prevent fraud, provide customer service and, where required, rely on consent for optional features such as location access or marketing.

6. Payments

When live card payments are enabled, payment data is processed by the configured payment provider. Smash Bones should not store full card numbers or security codes on this website.

7. Sharing

We may share data with payment providers, hosting providers, delivery drivers, email or SMS providers, analytics providers, professional advisers and authorities where required by law. Data is shared only where necessary for the relevant purpose.

8. Retention

We keep personal data only for as long as necessary for orders, tax records, dispute handling, food safety records, fraud prevention and customer account administration. Demo browser data can be cleared from your browser storage.

9. Your Rights

Under UK GDPR, you may have rights to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. You may also complain to the Information Commissioner's Office.

10. Security

We use proportionate technical and organisational measures to protect personal data. No online system is completely risk free, and users should keep passwords confidential and report suspected unauthorised access promptly.

11. Cookies and Local Storage

This website may use cookies or browser storage to keep basket contents, demo account details, order tracking and preferences. Live analytics or marketing cookies should be enabled only with appropriate consent controls.

12. Contact

Privacy requests can be sent to Smash Bones at Unit 4/5, Nag's Head Market, Seven Sisters Road, London, N7 6AG, or to the restaurant email address published on this website.