Privacy Policy

Privacy & Cookie Policy
(Last updated 16/07/2025)

1. Introduction

This Privacy & Cookie Policy (“Policy”) explains how Mustang Masala and GrubDirect (collectively “we,” “us,” or “our”) collect, use, share, and protect your personal data when you use our Service. By accessing or using the Service, you agree to this Policy. If you do not agree, please discontinue use.

1.1 Joint Controllers of Data

Mustang Masala and GrubDirect act as joint controllers of the personal data collected through the Service.
We jointly determine the purposes and means of processing your personal data.

1.2 Data We Collect

Information You Provide

• Account Data: Name, email, phone number, delivery address, payment details, etc., provided during account creation or while placing an order.
• Order Information: Items ordered, special instructions, and related transaction details.
• Marketing Preferences: Whether you have opted in or out of receiving marketing communications.

Information Collected Automatically

• Technical Data: IP address, device type, device ID, browser type, operating system, and usage data (pages viewed, links clicked).
• Cookies & Tracking: We use cookies, web beacons, and similar technologies to remember your preferences, enhance user experience, and analyze site traffic.

Information from Third Parties

• Payment Processors: Transaction confirmations (not full card details).
• Delivery Services: Minimal information required for delivery (e.g., name, address).

1.3 How We Use Your Information

• Order Fulfillment: Processing orders, preparing food, and managing deliveries or pickups.
• Account Management: Creating and maintaining your account, verifying identity, and responding to inquiries.
• Analytics & Service Improvement: Understanding usage patterns, troubleshooting technical issues, and developing new features.
• Marketing & Communications: Sending promotional messages (unless you opt out) and updates about services or policy changes.
• Legal Obligations & Security: Complying with laws and preventing fraud.

1.4 Legal Basis for Processing (UK GDPR / DPA 2018)

• Contractual Necessity: To fulfill orders and provide the Service.
• Consent: For promotional emails or non-essential cookies.
• Legitimate Interests: Improving the Service, detecting fraud, and ensuring security.
• Legal Obligations: Compliance with legal/regulatory requirements.

1.5 How We Share Your Data

• Between Mustang Masala and GrubDirect: Shared as joint controllers to operate the Service.
• Service Providers:
  • Payment Processors (to process payments securely).
  • Delivery Partners (to facilitate deliveries).
  • Analytics/Marketing Tools (for analytics or advertising, where legally permitted).
• Legal/Business Transfers: Data may be disclosed to comply with law or as part of a business transfer.

👉 We do not sell your personal data to third parties for independent marketing.

1.6 Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Policy or as otherwise required by law.

1.7 Your Rights

Depending on your location, you may have rights under data protection law, including:

• Access & Rectification: Request a copy or correction of your data.
• Erasure: Request deletion of data where legally permissible.
• Objection & Restriction: Object to or limit processing.
• Portability: Receive data in a machine-readable format.
• Withdraw Consent: Opt out of marketing or withdraw consent at any time.

To exercise these rights, contact Mustang Masala or GrubDirect (see Section 2.3).

1.8 Cookies & Similar Technologies

• What Are Cookies? Small text files stored on your device.
• Types of Cookies:
  • Essential: Required for functionality (e.g., cart).
  • Performance: Help analyze usage.
  • Functional: Remember preferences.
  • Targeting/Advertising: Deliver relevant ads (if used).
• Managing Cookies: Most browsers allow you to refuse/accept cookies, but blocking some may affect site performance.

1.9 Data Security

We use reasonable measures to protect your data, but no system is 100% secure.

2. International Data Transfers

Your personal data may be transferred outside the UK. Safeguards are applied to ensure compliance with applicable laws.

2.1 Children’s Privacy

The Service is not intended for users under 18 without parental consent. If data is collected from a minor, contact us for deletion.

2.2 Updates to This Policy

We may update this Policy. The latest version will be posted with a new “Last Updated” date. Continued use indicates acceptance.

2.3 Contact Us (Privacy & Data Questions)

Mustang Masala
47 Smalley Dr, Derby, DE21 2SF
📞 Phone: 01332 677784
✉️ Email: info@mustangmasaladerby.co.uk
🌐 Website: https://mustangmasaladerby.co.uk

GrubDirect
5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN
✉️ Email: info@grubdirect.co.uk
🌐 Website: https://www.grubdirect.co.uk