Privacy
What we keep, and why.
We collect the least we can to cook and deliver your lunch. No ad tracking, no selling of data.
What we collect
- Email — to send your 6-digit sign-in code and your order confirmation.
- Name, delivery address, postcode, delivery point — so the right box reaches the right desk. Your name goes on the lid.
- Phone (optional) — only so the driver can reach you.
- Orders — what you ordered, when, how you paid, delivery day, stamps and Lunch Pass credits.
- Office membership — if you join or organise a Buraq Table office, the office you belong to and (for organisers) the roster of who ordered.
- Push subscription — only if you turn reminders on; you can turn them off in Account at any time.
- Mr Flash messages — what you ask the concierge, so Hooria can read requests. Don't put card numbers in there.
Who processes it for us
- SumUp — card, Apple Pay and Google Pay. Card details go directly to SumUp; we see only that a payment succeeded.
- Resend — sends the sign-in codes and order emails.
- Cloudflare — hosts the app and the database, and runs the model behind Mr Flash.
How long
Order records are kept for as long as tax and accounting rules require. Sign-in codes expire after ten minutes. Push subscriptions are deleted when you turn reminders off or they stop working. Ask us to delete your account and we will, keeping only the order records we're legally required to hold.
Cookies and storage
No tracking cookies. The app keeps your sign-in token, your drink choice and your last order in your browser's local storage so ordering is one tap next time. Clearing site data signs you out.
Your rights
You can ask what we hold about you, correct it, or have it deleted. Email admin@buraqhospitality.co.uk. If you're not happy with our answer you can complain to the Information Commissioner's Office (ico.org.uk).
Controller
BuraqHospitality Ltd, company no. 17153833, 30 Pennant Crescent, Cardiff CF23 6LN. admin@buraqhospitality.co.uk.
Last updated 2 September 2026.