Privacy notice
Legal information for the FAFFLE super app and Dino’s food ordering. Updated 8 November 2026.
Who we are
FAFFLE is published by FAFFLE Technologies Ltd (company number 17509511), which manages shared FAFFLE accounts, authentication and platform security. Dino's food sales, preparation and fulfilment are operated by Faffle Food Ltd (company number 17483211). Each company is responsible for its relevant processing purposes. Their registered office is 82A James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE, United Kingdom. Privacy contact: info@faffle.co.uk.
Information processed
Depending on the enabled service, this may include your email address and account identifiers; login, authentication and session records; food order contents and order status; collection or delivery details; optional saved addresses; financial totals, transaction references and refund details; customer-support messages; privacy requests; and technical security records. Do not provide payment card numbers, passwords or verification codes to staff. Optional future FAFFLE services are not active merely because their tiles appear.
Purposes and legal bases
We use account and order information to provide requested services and perform contracts. We retain necessary accounting information to comply with legal obligations. We use proportionate technical and security data for our legitimate interests in protecting accounts, preventing fraud and maintaining service reliability. We handle rights requests as required by law. Marketing will not be sent merely because you place an order; where applicable, we obtain legally valid permission and provide an opt-out.
Food allergies
If you voluntarily share information about an allergy, we use only what is needed for safe handling of your request. Allergy-related health information needs special care under data-protection law. Contact the kitchen directly on 07353 235436 before ordering if you have an allergy; do not assume that adding a free-text note makes a meal safe.
Processors and other recipients
Approved service and support staff may access only the information required for their role. Our systems may use Supabase for accounts/database, email-delivery and hosting services, and the payment provider shown at checkout. Stripe or SumUp may process payments when those methods are enabled, according to their own notices where relevant. For the backup ordering website, hosting may differ. GoCardless is not represented here as an active FAFFLE app payment method. We may disclose information if required by law.
International processing
Some providers may operate outside the UK. Where a restricted international transfer occurs, we assess and use an appropriate mechanism under UK data-protection law. Contact us for current provider and safeguard details.
Retention
We keep information only for a justified period. Necessary accounting records may generally need to be retained for approximately six years after the relevant accounting period, subject to applicable rules and legal claims. Optional addresses, expired authentication and collection credentials, and operational notes should be retained for shorter periods where appropriate. We assess deletion requests against these obligations.
Your rights
Subject to applicable law, you can ask for access, correction, erasure, restriction, portability, or object to certain processing. You can withdraw consent where used. Email info@faffle.co.uk. We may need to verify identity and normally respond within one month, subject to lawful extensions. You can complain to the UK Information Commissioner's Office at ico.org.uk.
Account deletion and security
To request account deletion, use the Account section in FAFFLE or the public account-deletion page linked below. We review any outstanding orders, disputes, payments and mandatory financial records, remove or restrict personal data as required, and communicate the outcome. Our systems use access controls and secure communications; no system can guarantee zero risk.
Cookies and changes
The app may securely store credentials and preferences. Ordering websites may use necessary storage for baskets and order tracking. See our Cookies and device storage notice. We update this notice when services or providers change. Last updated: 8 November 2026.