Last updated 15 August 2026
This policy is issued by Ayla Food Suppliers LTD, trading as Restaurant Commerce Platform (Unit 7, Newman Road, Croydon, CR0 3JX, company number 14876973). We're the data controller for the personal data described below, and we're registered in England and Wales.
This policy covers everyone who interacts with the platform: visitors to this website, people who ask us for a demo, restaurant owners and staff who run a storefront on the platform, and customers who order food through one of those storefronts.
If you visit this website. With your consent, we use Google Analytics (GA4) to understand how visitors use the site — pages viewed, general location at country/region level, and device type. This never runs before you accept our cookie banner, and you can withdraw consent at any time (see Cookies, below). Legal basis: consent.
If you request a demo. We collect your name, email address, restaurant name, and (optionally) phone number, so a member of our team can get in touch about your demo. We don't use this to send you unrelated marketing. Legal basis: legitimate interest (responding to an enquiry you initiated).
If you're a restaurant owner or staff member. We collect your name, email address, and role, to create and secure your account and determine what you can access. Legal basis: performance of our contract with you (or the restaurant you work for).
If you order from a restaurant on the platform. Placing a guest order collects your name, phone number, and — for delivery — your delivery address, so the restaurant can fulfil your order and contact you about it. We never collect card or payment details ourselves; payment is handled directly between you and the restaurant. If you create an optional account, we also store your email, order history, saved addresses, and (if the restaurant offers it) a loyalty balance linked to your phone number. Legal basis: performance of a contract (fulfilling your order) and, for the optional account features, consent.
For orders placed through a specific restaurant's storefront, that restaurant is also independently responsible for how it uses your order data — this platform provides the infrastructure, but doesn't control each restaurant's own decisions about contacting its customers.
We keep account and order data for as long as your account is active, and for a reasonable period afterwards to meet accounting and legal obligations. Demo requests are kept only as long as needed to follow up, then deleted. Analytics data is retained according to Google's own default GA4 retention settings.
We don't sell personal data. We share it only with:
Each of these processes data under its own agreement with us and its own privacy policy.
Our database is hosted in the EU. Google Analytics may process data in the United States; Google self-certifies under the UK extension to the EU-US Data Privacy Framework, which UK GDPR recognises as providing an adequate level of protection.
Under UK GDPR, you have the right to:
To exercise any of these, email us at hello@restaurantcommerce.co.uk. If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ico.org.uk).
This site uses a small number of cookies and similar storage. See our Cookie Policy for the full list and how to change your preferences.
This platform isn't directed at children, and we don't knowingly collect personal data from anyone under 13.
We'll update the date at the top of this page whenever we make a material change, and post the new version here.
Questions about this policy or your data: hello@restaurantcommerce.co.uk.