Legal
Privacy policy
Last updated 20 October 2026
This policy explains how Chefzi handles personal data on this website. It is written for the United Kingdom and follows the UK GDPR and the Data Protection Act 2018. Chefzi is the controller for the demo and contact form on this site.
What the demo form collects
The form at /demo, and the same form on the contact page, collects and stores:
- your name
- the business name
- your email
- your phone number, stored as a UK number
- your message, if you write one
- the postcode or town, and a postcode taken from that line when one is there
- the cuisine, the ordering system you use now, the number of locations, and the best time to call
- that you ticked the box to be contacted about the enquiry
- the page address, your IP address, and the browser’s user agent
We use these details to reply to the enquiry. We do not sell them. A field that is only there to catch automated submissions is not stored.
Lawful basis
We rely on two bases in Article 6 of the UK GDPR.
Consent, Article 6(1)(a). The form asks you to tick “Chefzi can contact me about this enquiry.” We rely on that consent to phone and email you about the enquiry. You can withdraw it at any time by writing to info@chefzi.co.uk. Withdrawing consent does not affect a reply we had already lawfully sent.
Steps before a contract, Article 6(1)(b). We use the same details to answer the request and, if the business goes ahead, to set up the ordering service.
How long we keep it
We keep the enquiry so we can answer it and, if you become a customer, so we can set the account up. The system has no automatic deletion date. Email info@chefzi.co.uk and ask us to delete it, and we will delete the enquiry from the live database unless a law requires us to keep a record. We do not apply a fixed retention period of our own.
Processors
Three processors handle a demo enquiry:
- Railway hosts this website and the API that receives the form.
- Supabase hosts the Postgres database that stores the enquiry, in the United Kingdom (eu-west-2).
- Resend sends the notification email to info@chefzi.co.uk.
We do not pass the enquiry to an analytics service.
Your rights
You can ask us for a copy of the enquiry, for a correction, for deletion, or for us to restrict how we use it. Where the right applies, you can ask for a portable copy. You can withdraw the consent you gave on the form, and you can object to further contact about the enquiry. Write to info@chefzi.co.uk. We may need to confirm the request is yours.
Complaints
You can complain to the Information Commissioner’s Office, the UK regulator for data protection. The complaint route is ico.org.uk/make-a-complaint. You can also write to the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or phone 0303 123 1113.
Cookies
This website does not set a cookie. It does not use an analytics cookie, an advertising cookie, or a social-media cookie. Choosing Accept does not start analytics, and no third-party analytics tool is loaded.
The only thing the site stores in the browser is one localStorage item, named chefzi-consent, after you press Essential only or Accept. The value is essential or all. It stays on your device. It is not sent to Chefzi or to an advertising network. Clearing site data for chefzi.co.uk removes it, and the banner shows again. The cookie policy says the same.
The WhatsApp button opens a chat with a fixed message. It does not send the demo form. WhatsApp receives that chat only if you choose to open it.
If you become a customer
A restaurant account stores the business name, address, phone, email, and a password hash, plus the menu, hours, zones, promotions, website content, and photos the restaurant uploads. An order stores the diner’s name, phone, email if they give one, the delivery address when they ask for delivery, the dishes, and how they paid. Card numbers are not stored by Chefzi. The same Railway API and Supabase database hold this account data. Deleting the restaurant account removes the restaurant, its menu, orders, reservations, and devices from the live service. The owner does that from the account deletion page on the Chefzi service, with the owner email, the password, and the restaurant name typed exactly, or by writing to info@chefzi.co.uk.
Contact
Privacy questions and deletion requests: info@chefzi.co.uk.