canapes with story

Privacy Policy

How we collect, use, share, retain, and protect personal information

This Privacy Policy explains how Canapes Premium Food Restaurant LLC processes personal information through canapes.ae, checkout, order support, delivery, events, email, telephone, and WhatsApp.

Controller and contact

The controller is Canapes Premium Food Restaurant LLC, legal and business name CANAPES PREMIUM FOOD RESTAURANT L.L.C, Commercial Licence No. 1628259, Clover Bay - SH-03, Plot No 42-0, Bay Business, Dubai, United Arab Emirates.

For a privacy question or request, email info@canapes.ae or call +971 55 331 0123. Please describe the request and the information or order concerned so we can verify and respond securely.

Information we collect

We collect information you provide, including name, email, telephone and WhatsApp numbers, company details, delivery and billing addresses, location coordinates selected in the address tool, access instructions, order contents, event details, invoice information, support messages, and dietary or allergy information you choose to disclose.

We also process transaction references and payment status supplied by our payment processor, account and authentication records where used, checkout-policy acceptance records, device and browser information, security logs, IP address, language, pages and cart interactions, cookie or browser-storage data, and communications history. We do not intentionally receive or store full payment-card numbers or security codes.

Purposes and legal bases

We process information to take requested pre-contract steps; accept, prepare, deliver, bill, support, change, or refund an order; manage accounts and event enquiries; comply with accounting, food-safety, consumer-protection, and other legal duties; establish or defend legal claims; protect customers and the service; and, where required, act with your consent.

We identify the relevant purpose and legal basis for processing instead of relying on a broad, undefined “legitimate interests” statement. Where applicable law requires consent for a particular activity, that requirement remains applicable; the cookies section below describes the website’s current automatic-loading configuration for analytics and advertising measurement.

Payments, delivery, and service providers

We share only information reasonably necessary with providers supporting payment processing, delivery, maps and address validation, hosting and database services, authentication, email or WhatsApp communications, accounting, customer support, security, professional advice, and event or venue coordination.

Stripe processes card payments under its own privacy information. If you select Tabby, we share the contact, delivery, order, item, and total information needed for Tabby to assess eligibility, prevent fraud, create the payment session, and process authorisation, capture, cancellation, or refund under Tabby’s own privacy information. Delivery partners receive the recipient, telephone number, address, location, and instructions needed for handover. Providers may act as processors or independent controllers depending on their service and legal duties.

Dietary and health information

Allergy, intolerance, and medical dietary details may reveal health information. We ask only for information needed to assess and fulfil the food request safely, limit access to staff and providers who need it, and do not use it for unrelated marketing.

Do not provide more medical information than necessary. If we cannot safely meet a disclosed requirement, we may contact you, propose a suitable change, or decline the affected item or order.

Cookies, analytics, and marketing tools

Essential browser storage supports security, language, cart, and checkout. Google Analytics and Meta Pixel are measurement or advertising technologies and currently load automatically when configured on the website; the site does not currently provide a separate on-site consent switch for them.

You may use browser settings or compatible browser tools to block or delete cookies, local storage, and tracking requests. Those restrictions may also affect language, cart, checkout, security, or other website functions depending on the settings selected. See the Cookie Policy for more detail.

International transfers

Some technology and communications providers may process information outside the UAE. Where UAE law requires it, we use an available lawful transfer mechanism and proportionate contractual, access-control, security, and data-minimisation safeguards.

You may contact us for more information about the categories of safeguards used for a relevant transfer, subject to confidentiality and security restrictions.

Retention

We retain order, invoice, payment-reference, acceptance, delivery, refund, and complaint records for the period needed to fulfil the order and meet applicable UAE accounting, tax, consumer, food-safety, fraud-prevention, and legal-claims requirements. We then delete or anonymise them where reasonably possible.

Uncompleted checkout drafts held in your browser remain until browser storage is cleared or the application replaces them. Enquiries and marketing permissions are kept only while needed for the request, proof of permission, suppression of unwanted marketing, or a related legal obligation.

Security and incidents

We use proportionate technical and organisational controls, including access restrictions, encrypted transport, managed service providers, audit records, and limited administrative access. No online service can guarantee absolute security.

We assess suspected personal-data incidents and notify the UAE Data Office and affected individuals when and within the period required by applicable law.

Your rights

Subject to applicable UAE law and its exceptions, you may request information about processing; access or a copy; correction; deletion; restriction or cessation; portability where applicable; objection to certain automated processing; and withdrawal of consent. You may also complain to the competent UAE authority.

We may verify identity, clarify the request, protect other people’s rights, and retain information that law requires or permits us to keep. Withdrawing consent does not invalidate processing already lawfully completed before withdrawal.

Children

The website and online checkout are intended for adults. We do not knowingly solicit orders or personal information directly from children.

If you believe a child supplied personal information without appropriate authority, contact us so we can review and take suitable action.

Policy updates

We may update this policy for changes in law, services, providers, or processing. The date above identifies the current version. A material change applies prospectively and will be highlighted or notified where required.

The Arabic version governs if a translated version conflicts with it. Questions and rights requests may be sent to info@canapes.ae or raised by telephone at +971 55 331 0123.