Privacy

Privacy notice

Last updated: 25 October 2026

How your details are used when you order food through a DreamOrder ordering page or use this website – UK GDPR.

1. Who is responsible

The restaurant you order from decides how your order details are used and is the controller of them. DocDream – Şükrü Erek, a sole trader based in Bristol, United Kingdom, trading as DocDream – runs the DreamOrder system on the restaurant's behalf as its processor. For this website itself (dreamorder.co.uk), its contact form, visitor statistics and security records, DocDream is the controller.

2. What is collected when you order

Your name, phone number, collection or delivery choice, delivery address and postcode, the items you choose, any allergy note, and – only if you tick the box – your agreement to receive offers from that restaurant. Card details go directly to Stripe and are never stored by DreamOrder or the restaurant.

3. Why it is used

To prepare, deliver and contact you about your order (contract), to check that we deliver to your postcode, to keep the restaurant's sales records (legal obligation) and, only if you ticked the box, to send you that restaurant's offers (consent). Reply STOP at any time to stop offers.

4. How long it is kept

Your name, phone number and address are removed from the order records after 30 days. The items and totals stay in the restaurant's sales records, which UK tax law requires businesses to keep. If you agreed to offers, your name and number are kept for that purpose until you reply STOP.

5. Contact form and help assistant

If you send us a message, we use your name, e-mail, optional phone number and message only to reply (legitimate interests) and delete them after 12 months. The help assistant answers from our FAQ inside your browser – what you type into it is not sent to us or stored.

6. Visitor statistics

We count visits to these pages without cookies and without storing IP addresses. At the moment of a visit the IP address is matched to an approximate country, region and city using a database on our own server (IP geolocation by DB-IP.com); only daily totals are kept (pages, country, region, city, referring site and device type). A daily-changing random code lets us count unique visitors for that day only; it is destroyed at the end of the day (legitimate interests).

7. Who it is shared with

We never sell personal data. Hetzner Online GmbH (Germany) hosts our servers; Stripe processes card payments as an independent controller under its own privacy policy; postcodes.io is used to check that a postcode exists (only the postcode is sent); Google provides the e-mail service we use to reply to messages. The restaurant and its delivery staff see your order details to fulfil it. Where data leaves the UK it is protected by UK-approved safeguards.

8. Cookies and tracking

The ordering pages and this website use no tracking or advertising cookies and no third-party analytics. Your basket is kept only in the page while you order.

9. Security

Encrypted connections, hardened servers, automatic security updates and continuous monitoring. Our attack protection records the IP address and time of suspicious requests in a rolling security log that is overwritten as it fills.

10. Your rights

You can ask to access, correct or delete your data, object to its use, or withdraw consent for offers. Contact the restaurant, or e-mail info@docdream.co.uk and we will pass your request on and help them answer it within one month. You can complain to the Information Commissioner's Office: ico.org.uk · 0303 123 1113.

11. Changes

If we change this notice in a way that matters, we will update the date at the top of this page.