Privacy Policy
Last updated: 7 October 2026
Who controls your data
Smokey Woods, of 170 Aycliffe Road, Borehamwood, WD6 4EG, GB. We decide why and how your data is used, and requests about your data should come to us first.
Who processes it for us
Smokey Woods uses DineHarbor as its online ordering platform, provided by Respiresoft LLC, 32 N Gould St, Sheridan, WY 82801, United States. DineHarbor processes your data on our instructions, as our processor - it does not decide why or how your data is used, and it does not sell your data.
What we collect
- Your name, phone number and email address.
- For delivery: your delivery address and any delivery notes.
- Your order history: what you ordered, when, and how you paid (we never receive your full card number - that goes straight to our payment provider).
- If you create an account: a password hash or passkey, saved addresses, and favourites.
- Loyalty points and stored wallet balance, if we offer them.
- A review you write: your display name, rating and text.
- Session and security cookies, and a few browser-storage entries for your basket, favourites and preferences.
Our app shows this same website, so it collects exactly what is listed here and nothing more.
For the exact list, see our Cookie Notice.
Why we use it
| Purpose | Legal basis |
|---|---|
| Taking and fulfilling your order | Contract - performing the order you placed with us |
| Your account, saved addresses, favourites, loyalty and wallet | Contract, or your consent to create an account |
| Preventing fraud and keeping accounts secure | Legitimate interest |
| Marketing emails or offers, if you opted in | Your consent, which you can withdraw at any time |
Who else receives it
| Provider | What for | What it receives |
|---|---|---|
| Revolut | Taking your payment online | The order amount and your name/contact details for the order; your card or account details go straight to Revolut, never to us. |
| Google Maps | Showing our location on a map | Your IP address and browser details, when the map in the ‘Find us’ section loads - it loads once you scroll near that section. Nothing about your account or orders. |
| DeepSeek | Answering questions you ask the ‘Ask the menu’ assistant | The question you type. DeepSeek's servers are in China, which does not have a UK or EU adequacy decision. |
| Soniox | Turning your spoken question into text, when you press the microphone in ‘Ask the menu’ | The sound from your microphone while it is on, streamed live and turned into text. Nothing about your account or orders. |
How long we keep it
| Data | Kept for |
|---|---|
| Your account, orders, favourites, loyalty and wallet balance | For as long as you have an account here, unless you or the restaurant deletes it sooner |
| Sign-in history | 180 days |
| Notifications you have read | 90 days |
| Delivery rider location while your order is on its way | 30 days |
| Proof of delivery (recipient name, signature, photo) | 180 days, the card-dispute window |
| Sales records after your account or the restaurant closes | Your name and address are removed; amounts, items and taxes are kept for as long as tax law requires the restaurant to keep them |
Your rights and how to exercise them
Under UK GDPR you can ask to see your data, correct it, delete it, restrict or object to how it is used, and receive a copy to take elsewhere.
Download a copy of your data or delete your account any time in Account → Security.
- For anything else, contact us using the details below.
- You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
This site is not directed at children. We do not knowingly collect data from children under 13; if we learn we hold such data, we will delete it.
Changes to this policy
We will update this page when what we collect or who processes it changes, and change the date at the top.
Contact
Smokey Woods, 170 Aycliffe Road, Borehamwood, WD6 4EG, GB, phone 020 8953 5565, email sayed.waqar@smokeywoods.co.uk.
