Last updated 13 November 2026
What we collect
- Your order: your name, mobile number, email address if you give one, delivery address for deliveries, what you ordered, any notes, and when.
- Texts: the texts we send you about your order and your replies.
- Chat with Doughball, our ordering assistant: what you type, so it can build your order.
- Payments: if you pay online, Square handles your card. We never see or store your card details; we get a record that you paid and how much.
- An account, if you make one: your contact details and saved delivery address.
- How the site is used: see cookies below. We don't collect anything for advertising.
Why we use it
- To take, make and deliver your order, and to text you about it (confirming it, telling you when it's ready, or if anything changes). We need these details to carry out our contract with you. We only text you about your orders, never marketing.
- To keep ordering safe, for example limiting how many orders one number or connection can place, and the security check at checkout. This is in our legitimate interests in stopping fake orders.
- To keep records of what we sold, which the law requires for our accounts.
- To understand how the site is used so we can improve it. Analytics cookies are only used if you accept them.
Who helps us
These companies process your details for us, only to provide their service:
- Square: online payments and our till.
- Twilio: sending and receiving texts.
- OpenRouter and the AI model provider it routes to: reading chat messages and texts so Doughball can reply. We ask for providers that don't keep or train on what you write.
- Cloudflare: the security check at checkout, and hosting menu photos.
- Vercel and Turso: hosting the site and its database.
- Our email provider: sending sign-in codes.
- postcodes.io: checking a delivery postcode is in our area (only the postcode is sent).
- PostHog (EU) and a self-hosted copy of Plausible: site analytics (see below).
Some of these are based outside the UK. Where your details leave the UK, they're protected by the safeguards UK law requires, such as approved contract terms.
How long we keep it
- Texts: 180 days.
- Your name, number, email, address and notes on an order: two years after the order, then removed. We keep what was sold and for how much, without your details, for our accounts.
- An account: until you ask us to close it.
- If you text STOP, we keep your number on our do-not-text list for as long as you stay opted out, so we can respect it. Text START to undo it.
Cookies and similar storage
Needed for the site to work (no choice needed): your basket and order panel are saved in your browser so they survive a refresh; a sign-in cookie if you have an account; Cloudflare's security check at checkout; and a note of your cookie choice.
Analytics, only if you accept: PostHog uses cookies and browser storage to see how visitors move through the menu and checkout. If you say no, or haven't chosen yet, it only counts visits without storing anything on your device. Plausible never uses cookies. We don't record your screen, and the order tracking page and your order link are never sent to analytics.
To change your mind, clear this site's cookies and storage in your browser and you'll be asked again.
Your rights
You can ask for a copy of the details we hold about you, ask us to correct or delete them, object to how we use them, or ask us to stop using them. To do any of this, call 01292 310297. We'll reply within a month. Some records we have to keep for our accounts, but we'll tell you if so.
If you have an account, you can delete it yourself at any time from your details (tap your initials when signed in, then “Delete my account”). That deletes your account and saved details straight away. Your past orders stay in our accounts, but without your name, number, email or address. If you have an order on the go, you can delete your account once it's done.
If you're unhappy with how we've handled your details, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.
See also our terms of sale.
Who we are and how to reach us
Dough, 159 Templehill, Troon, KA10 6BH. Phone 01292 310297.