Privacy Policy | Turkish Dish

Last updated: 8 November 2026

This page explains what personal information Turkish Dish collects when you use turkish-dish.com, why we collect it, how long we keep it and what your rights are. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). We have kept it short and in plain English.

1. Who we are

Turkish Dish is a London guide to Turkish restaurants, cafés, bakeries and grocers, and we are preparing a food delivery service for those businesses. We are the “controller” of the personal information described on this page.

Controller: [to confirm: legal name of the business, and whether it trades as a sole trader or a registered company with its company number]
Address: [to confirm: trading address]
Email for anything about your data: [to confirm: contact email]

2. What we collect and why

We only collect what you give us or what is needed to run the website.

Delivery registration, businesses (the form on Deliver with us): business name, contact name, telephone number, email address, whether you would use the delivery service, and your area of London (optional). We use this to contact you about the delivery service and to plan the launch.
Delivery registration, drivers: full name, telephone number, email address, area of London, and the vehicle you would use (optional). We use this to contact you about driving for the service.
Contact form: your name, email address, subject and message, used to reply to you.
Listing accounts: if you create an account to add or claim a business listing, we hold your username, email address, the business details you publish and any photos or events you upload. We use this to run your listing.
AI search assistant: if you type a question into the site’s chat assistant, the text of your question is processed to give you an answer (see section 5). Do not put personal details into the chat.
Technical data: our hosting provider keeps standard server logs (IP address, browser type, pages requested, time) for security and to keep the site running. We do not use these to profile you.

We do not buy data about you, we do not sell or rent your details, and we do not use them for advertising.

3. Our lawful basis

Consent, for contacting you about the delivery service after you register interest (you tick a box to agree, and you can withdraw at any time).
Legitimate interests, for running and securing the website, keeping server logs, replying to messages you send us and publishing the directory. We have checked that this does not override your rights.
Contract, if you go on to join the delivery service as a partner business or driver, for the information needed to set up and run that relationship. Those terms will be given to you in writing before you agree.

4. How long we keep it

Delivery registrations: deleted if we have not taken them forward within 12 months of the date you registered, or sooner if you ask.
Contact form messages: deleted once your query is dealt with, and no later than 12 months after you sent them.
Listing accounts: kept while the account is active; deleted on request or when the account is closed.
Partner and driver records, if the service launches and you join: kept for the length of the relationship and then for as long as tax and accounting law requires (normally six years).
Server logs: kept by our hosting provider for a short rolling period for security.

5. Who receives your information

Turkish Dish staff only, plus the service providers (“processors”) below who handle data on our instructions:

Hostinger, which hosts the website and its database (where form submissions are stored) and provides the mailbox that sends our emails.
WordPress plugins running on our own server, Contact Form 7 and Flamingo, which process and store form submissions. They do not send your data to the plugin makers.
Mapbox (USA), which serves the map tiles on listing and search pages. When a map loads, Mapbox receives your IP address and the map area requested.
Google Fonts (Google LLC, USA), which serves the typefaces used on the site. Your browser requests the font files from Google, which receives your IP address.
OpenRouter (USA), which provides the AI model behind the site’s search assistant. The text you type into the chat is sent to OpenRouter to generate an answer.

Photos on the site are stored on our own server; we do not embed images from Pexels or restaurants’ websites, we only credit them. We do not use Google Analytics or any other analytics or advertising service. The online shop section of the site is not open; if it opens, this page will be updated first.

We may also share information if the law requires it, or to protect our rights or the safety of others.

6. International transfers

Mapbox, Google and OpenRouter are based in the United States, so the limited data described above (mainly your IP address, and the text of chat questions) leaves the UK. Transfers to the US are covered either by the UK-US Data Bridge (where the provider is certified under the Data Privacy Framework) or by the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses in the provider’s terms. [to confirm: we are checking which safeguard applies to each of the three providers and will name it here.] Hostinger is a European company; [to confirm: the location of the server that hosts turkish-dish.com].

7. Your rights

Under UK data protection law you can ask us to:

give you a copy of the information we hold about you (access);
correct anything that is wrong (rectification);
delete your information (erasure);
stop using it for a while (restriction) or stop using it altogether (objection);
give you your information in a portable file (portability), where we rely on consent or contract;
withdraw consent at any time, which does not affect what was done before you withdrew it.

To do any of these, email [to confirm: contact email] or reply to any email we have sent you. We will respond within one month. We do not charge for this unless a request is clearly unfounded or excessive. If you are not happy with how we have handled your information, you can complain to the Information Commissioner’s Office: ico.org.uk, helpline 0303 123 1113.

8. Cookies and similar technologies

We do not use marketing, advertising or analytics cookies. The site sets only what it needs to work:

Login and account cookies (WordPress), only if you have a listing account and log in. They keep you signed in and remember your screen settings, and expire when you log out or after a set time.
Cache cookie (LiteSpeed Cache), which tells our page cache whether to show you a logged-in or a logged-out version of a page.
Directory preferences: the listing software may remember things like listings you have recently viewed or bookmarked in your browser so they are there when you come back.
Announcement bar: if you close the bar at the top of the site, your browser stores a single value for seven days so it stays closed. This uses browser storage, not a cookie, and is not sent to us.

These are “strictly necessary” under PECR, so no consent banner is needed. If we ever add analytics or other non-essential cookies, we will ask for your consent first and update this page.

9. Children

The site, the listing accounts and the delivery registration forms are for adults. You must be 18 or over to register as a driver or on behalf of a business. We do not knowingly collect information from anyone under 18; if you think we have, email us and we will delete it.

10. Security

The site is served over HTTPS, access to the admin area is limited to Turkish Dish, and form submissions are stored in the site database at our hosting provider. No system is perfectly secure, so please do not send us sensitive information (for example bank details) through the forms.

11. Changes to this page

If anything changes, for example when the delivery service launches or we add a new provider, we will update this page and change the date at the top. Significant changes affecting people who have registered interest will be emailed to them.