Privacy Policy

Last updated: 21 October 2026

1. Who we are

This website and the FoodX ordering platform are run by FoodX Online Food Ordering & POS System ("FoodX", "we", "us"), based in the United Kingdom.

If you have any question about this policy or your personal data, write to info@foodx.com.

2. What this policy covers

FoodX provides online ordering websites to restaurants and takeaways. This policy explains how we handle personal data when you:

• visit this website (www.foodx.co.uk) or send us a message through it;
• create or use a FoodX account on a restaurant website powered by FoodX;
• order food through a restaurant website powered by FoodX, or from a restaurant that uses FoodX in another way (for example by phone), where we hold your order details for the restaurant;
• choose to receive offers or the FoodX newsletter;
• work with us as a restaurant partner.

FoodX and the restaurants. FoodX is responsible for your FoodX account, this website and the FoodX newsletter. The restaurant you order from is responsible for your order and for its own offers to you; we handle those details for the restaurant so it can take and fulfil your order. One FoodX account works on every restaurant website powered by FoodX.

This policy follows the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Please also read our Terms and Conditions.

3. The data we collect

Your account

When you sign up we collect your first and last name, e-mail address and a password. If you choose to sign in with an existing account from another service, that service shares your name and e-mail address with us. We also record the restaurant website you signed up on, the date and your IP address.

Your phone number

Before your first order you must add a mobile number and confirm it with a code we send by text message.

Your name, e-mail address and a confirmed mobile number are needed to create an account and order, and a delivery address for delivery orders. Without them we cannot take your order. Everything else, including your marketing choices, is optional.

Your orders

When you order we record what you ordered, prices, fees, discounts and tips, delivery or collection and the time you asked for, your notes to the restaurant, how you paid and a payment reference, the name, e-mail address, phone number and address used for the order, and the IP address the order came from.

Please do not put allergy or health information in your order notes. If you have an allergy, contact the restaurant directly before you order.

Addresses and location

You can save delivery addresses in your account. If you enter a postcode, we look up the matching addresses. If you press "Use my location", your browser asks your permission first and then shares your location so we can find your address.

Payments

Card details are entered directly into a secure payment form run by a payment service provider. Your full card number never reaches our servers. We receive a payment reference, whether the payment worked and, for the restaurant's records, the card type and the last four digits.

Security records

We record sign-ins and failed sign-in attempts (time, IP address and the e-mail address used, never the password), and password reset requests.

Your marketing choices

We record your choices about offers and newsletters and when you made or changed them.

Restaurant partners

We hold the business and contact details of restaurant owners and the staff who use FoodX systems, such as names, e-mail addresses, phone numbers and sign-in details.

4. How we use your data

Where we rely on legitimate interests, we have balanced them against your rights, and you can object at any time (see section 12). We do not make decisions about you that have legal or similarly significant effects using only automated means. Our automatic checks against fake orders may ask for an extra check or pause orders for a while; if you think this is wrong, contact us and a person will look at it.

5. Offers and newsletters

• Your choice. When you sign up on a restaurant website, or the first time you sign in on another restaurant website powered by FoodX, you can choose to receive that restaurant's offers by e-mail or text message, and the FoodX newsletter. These boxes are optional and never ticked in advance. You can order without ticking them.
• Each restaurant is separate. Saying yes to one restaurant never means yes to another.
• We check your address. When you say yes to offers by e-mail, we e-mail you a link to confirm that the address is yours, unless the service you signed in with has already confirmed it.
• Who sends them. Offers come in the restaurant's name from a FoodX e-mail address and show the restaurant's name and postal address.
• How to stop. Every marketing e-mail has an unsubscribe link. You can also change your choices at any time in My account, under "Offers and news", on any restaurant website, or e-mail info@foodx.com. Stopping is free and you do not need to give a reason.
• Do-not-contact list. If you unsubscribe, an e-mail to you bounces permanently or you mark one of our e-mails as spam, we keep your e-mail address (and, if you stop all marketing, your phone number) on a do-not-contact list, for that restaurant or for all marketing, so we never send you marketing by mistake.
• No bought lists. We never buy, rent or sell e-mail or phone lists.

Order e-mails, such as confirmations and refunds, are part of your order and are not marketing.

6. This website and cookies

Messages you send us

The contact form asks for your name, restaurant name, e-mail address, message and, if you wish, your mobile number. The "Keep in touch" form asks only for your e-mail address. Both are e-mailed to info@foodx.com; they are not stored in a website database. We use contact messages only to reply to you. We use "Keep in touch" addresses only to send FoodX news; you can stop at any time by replying to any of our e-mails or writing to info@foodx.com.

To stop spam, the forms include hidden checks, we limit how many messages can be sent from one connection, and a bot-protection service may check that a person is sending the form.

Cookies and similar storage on this website

Analytics is not loaded until you press Accept. If you press Reject, or later change your mind with the "Cookie settings" link at the bottom of every page, analytics is switched off and its cookies are removed. Our pages also load fonts from an external font service, which receives your IP address.

Restaurant websites powered by FoodX

Restaurant websites use cookies, kept for up to one year, to sign you in, remember your details and choices, and keep your basket and order. They use analytics cookies only if you accept them. Each restaurant website shows a cookie notice. The payment and map services used on those pages may set their own cookies.

Server logs

Like most websites, our servers record technical details of each visit, such as your IP address, browser type, the page requested and the time.

7. Who we share data with

We do not sell your personal data. We share it only as follows:

• The restaurant you order from receives your name, phone number, e-mail address, delivery address, notes and order, so it can prepare and deliver your food and contact you about it.
• The restaurant whose website you signed up on can see your name, contact details, your most recently saved address and your offers choices for that restaurant, even if you have not ordered from it yet.
• Service providers that work for us under contract and only on our instructions:
  • hosting and IT providers (our servers, database and backups);
  • e-mail and text message delivery providers (order e-mails, codes, messages from this website and marketing to people who agreed);
  • address lookup services;
  • bot-protection and security services;
  • an analytics provider, only if you accept analytics cookies.
• Payment and map services. Payment services take payments and make refunds for the restaurant; map services show maps and find addresses. They also use data for their own purposes, such as preventing fraud, under their own privacy policies.
• Sign-in services you choose. If you sign in with an existing account from another service, that service knows you are signing in to FoodX.
• Other businesses the restaurant uses to take, pass on or deliver its orders receive only the details needed for those orders.
• Authorities and advisers, when the law requires it (for example HM Revenue & Customs or the police), to protect our legal rights, or our professional advisers under a duty of confidentiality.
• A buyer of our business, if FoodX is sold, under the same protections as in this policy.

8. Where your data is kept

The FoodX ordering platform's servers and main database are in the United Kingdom. Some of our service providers may handle data in other countries. When they do, we make sure the transfer is protected as UK law requires, for example because the UK recognises that country's protection as adequate, or through contract terms approved for this purpose. You can ask us about this at info@foodx.com.

9. How long we keep data

We keep personal data only as long as we need it for the purposes in this policy. In particular:

• your account: until you delete it;
• orders, payments and refunds: at least 6 years, as UK tax and accounting law requires;
• security records and server logs: as long as needed to keep accounts and our systems safe;
• your marketing choices and the do-not-contact list: as long as needed to respect your choices and show that we did;
• messages sent through this website: as long as needed to deal with your enquiry and any follow-up;
• restaurant partner records: for the partnership and at least 6 years after it ends.

You can delete your account at any time in My account on any restaurant website. We then remove your name, e-mail address, phone number, password and sign-in links from the account and withdraw your marketing choices. Your saved addresses are closed but kept with your order records. We keep order records, security records, the do-not-contact list and the record of your marketing choices for the periods above. Deleted data may stay in our backups for a short time until they expire.

10. How we protect your data

We use appropriate technical and organisational measures to protect your data. For example, our websites use encrypted connections, passwords are stored only in a scrambled one-way form that nobody can read, sign-in is paused after repeated failed attempts, codes expire quickly, card numbers are handled by our payment service provider and never reach our servers, and staff and restaurant systems require a sign-in. If something goes wrong, we will act quickly and tell you and the Information Commissioner's Office when the law requires it.

11. Children

Our services are not meant for children under 16, and we do not knowingly create accounts for them. If you believe a child has given us personal data, contact info@foodx.com and we will deal with it.

12. Your rights

You have the right to:

• get a copy of the personal data we hold about you;
• have wrong or incomplete data corrected;
• have your data deleted where we have no good reason to keep it;
• ask us to limit how we use your data;
• object to our use of your data where we rely on legitimate interests, and object to direct marketing at any time;
• receive the data you gave us in a common electronic format;
• withdraw your consent at any time, without affecting what we did before.

You can change your name, phone number and marketing choices, and delete your account, yourself in My account. For anything else, e-mail info@foodx.com or write to the address in section 1. It is free. We may ask you to prove who you are. We will reply within one month, or tell you within that month if a complex request needs up to two more months.

If you are unhappy with how we handle your data, please tell us first at info@foodx.com so we can put it right. We will confirm that we have received your complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

13. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. If we make an important change, we will make it clear on this website and, where appropriate, tell you by e-mail.