Your details, looked after properly
We only collect what we need to cook and deliver your food, run your account, and keep the site safe. We never sell your details, and we don’t send marketing unless you ask for it.
Card details
Never stored by us. PayPal handles every card payment.
Allergies
Only saved with your consent. Remove them any time.
Your choice
See, correct or delete your details whenever you like.
Last updated: October 2026
What we collect
| When | What |
|---|---|
| You order | Name, email, phone number, delivery address, what you ordered, when you want it, and any notes or allergies you tell us about. |
| You create an account | Your name, email, optional phone number, saved addresses and order history. Your password is stored scrambled, so even we can’t read it. |
| You save allergies | The allergies you tick or type, and the date you gave consent. |
| You use account credit | Your balance and every top-up, spend and adjustment. |
| You have a trade account | Company name, address, VAT number if you give one, and purchase order numbers you add. |
| You fill in a form | Whatever you write on the catering, trade or contact forms. |
| You order alcohol | That you confirmed you’re 18 or over. We don’t keep copies of ID. |
| You order delivery | Your address is used to check the distance and the driving time from our kitchen, including traffic for longer trips. We keep the driving time on the order, and the times your driver took and delivered it. |
| You use “use my location” | Your phone’s location, only to fill in your address in the delivery checker. We don’t store it. |
| You leave a rating | Your stars, anything you write, whether you’d like your first name and initial shown, and which order it was about. |
| You collect or receive alcohol | Whether our staff or driver checked ID or refused the drinks. We don’t keep copies of ID. |
| You visit the site | Your IP address and browser details, used for security and, with your consent, anonymous visitor statistics. |
We don’t see or store your card details. Payments are handled by PayPal on their own secure systems.
Why we use it, and on what basis
- To cook, deliver and support your order (to carry out our contract with you).
- To run your account, account credit and trade pricing (contract).
- To keep accounting and tax records (legal obligation).
- To check age for alcohol (legal obligation under licensing law).
- To keep the site safe from bots, fake accounts and fraud (our legitimate interest in protecting customers and the business).
- To reply to enquiries you send us (legitimate interest, or steps before a contract).
- To understand how the site is used, through anonymous statistics (your consent, given in the cookie banner).
- To keep your allergies on your account (your explicit consent; see below).
- To tell you when your order is ready or on its way (contract).
- To ask how your order was, once, and to show reviews you choose to share (our legitimate interest in improving and in showing honest feedback). You can stop review requests with the link in any of them.
Allergy information
Allergies and intolerances count as health information, so we treat them with extra care.
- We only save allergies to your account if you tick the consent box on the allergy form.
- We use them for two things only: to warn you when a dish in your basket contains something you’ve told us about, and to tell the kitchen when you order.
- You can change or remove them at any time in My Account. Removing them deletes them from your account straight away.
- A copy of the allergies you give is kept with each order, because the kitchen needs it to cook that order safely and we need it in our records if there’s ever a question about the order.
- We never use allergy information for marketing.
How long we keep it
| Information | How long |
|---|---|
| Orders and payments | 6 years, as required for tax records |
| Your account | Until you ask us to close it. Orders then stay for the 6 years above. |
| Saved allergies | Until you remove them or close your account |
| Form enquiries | Up to 12 months, unless they lead to an order or trade account |
| Security logs | Only the most recent entries, which are replaced automatically as new ones arrive |
| Website backups | Up to 14 days, then overwritten |
| Published reviews | While they’re shown on the site; you can ask us to remove yours at any time |
| Private feedback | Up to 12 months |
| “No review emails” requests | Kept so we don’t email you again |
Keeping it safe
The site runs on a secure (HTTPS) connection. Staff sign-ins are protected by two-step verification, and we block bots and repeated password guessing. Only the people who need your details to do their job can see them.
Your rights
Under UK data protection law you can ask us to:
- see the personal information we hold about you;
- correct anything that’s wrong;
- delete your information, where we don’t have to keep it by law;
- stop or limit how we use it;
- give you your information in a format you can take elsewhere;
- withdraw consent you’ve given, such as for saved allergies.
Just contact us. We’ll reply within one month. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, though we’d appreciate the chance to sort it out first.
Questions?
Call our phone number, email email us, or write to us at Rodi Express, 1 Church Street, Welwyn, Hertfordshire, AL6 9LN.
We may update this policy from time to time. The date at the top shows when it last changed.
Rodi Express is run by 3ALFA GROUP LTD, registered in England and Wales, company no. 13360596, 1 Church Street, Welwyn, Hertfordshire AL6 9LN. We’re responsible for the personal information described on this page.
Rodi Restaurant and Rodi Express
Rodi Restaurant and Rodi Express are both run by 3ALFA GROUP LTD. If you say yes to news and offers on rodirestaurants.co.uk or rodiexpress.co.uk, we keep your name, email address, phone number and the offers you chose the same on both websites. That way a yes or a stop on one applies to both, and we can give you one Rodi card for your phone’s wallet. Your bookings and orders are not shared between the two websites.