Privacy Policy

Last updated: 7 July 2026.

Who we are

Northwest Bunoodles Ltd operates Dumpling Munch, a small restaurant and takeaway at 2 Swan Lane, Guildford, GU1 4EQ. We are the controller for the personal data described in this notice. For privacy questions, contact info@dumplingmunch.com.

Information we collect

To use the mobile ordering app, you register with a mobile phone number and verify it with a one-time passcode. You may choose to add an email address afterwards. We collect the details needed to take and prepare orders, including your name, phone number, optional email address, order contents, collection time, payment status, receipts, support messages, and account-deletion requests. The mobile app may also send app-version, platform, device push-token, and basic service-health information so we can keep ordering reliable and send order updates where you have enabled them.

Account storage and management

Customer accounts are stored and managed in our backend systems hosted on AWS. Customer data and backend data are encrypted at rest and in transit. Account records may include your verified mobile number, optional email address, profile details, order history, order-status messages, support records, app-device details, and payment or refund references. We use these records to keep your session secure, support account deletion, prepare orders, send service messages, and keep accounting and audit records.

Payments

If you enter card details manually in the app, Square is the payment provider for that card payment. If you choose Apple Pay or Google Pay, that wallet provider, your card issuer, card network, and Square may process information needed to authorise and complete the payment. Dumpling Munch does not store full card numbers or card security codes. We store order, payment, and refund references so we can reconcile payments, issue refunds, handle disputes, and answer receipt questions.

Notifications

We use Twilio to send SMS verification codes and SMS order-status messages. If you allow push notifications in the app, we may also send order updates to your registered devices. You can disable push notifications in your device settings.

How we use data

We use personal data to create and manage orders, take payment, send ready-for-collection updates, handle refunds and cancellations, prevent abuse, comply with legal duties, maintain accounting records, and understand basic service health. We do not sell customer data.

Who we share data with

We share data only where needed to run the service, including with payment providers, Apple Pay or Google Pay where you choose those wallet methods, Twilio for SMS, email providers, push-notification services, AWS and other hosting or database providers, professional advisers, and public authorities where the law requires it. These suppliers may process data for us under their own security and privacy terms.

Retention

We keep account data for as long as your account is active or as needed to support your orders. We keep order, payment, refund, receipt, tax, accounting, fraud-prevention, and audit records for as long as needed to comply with UK legal duties, including HMRC and accounting obligations, and to handle disputes or chargebacks.

Your choices

You can request account deletion from inside the mobile app after a fresh one-time passcode check. You can also contact us at info@dumplingmunch.com to ask about access, correction, deletion, or support with your account. If you ask for a copy of your data (a subject access request), we will run an export of the personal data we hold about your account and send it to you, normally within one month.

Complaints

We hope you contact us first so we can help. You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how we handle your personal data.