Back to menu

Privacy policy

Updated 31 October 2026

This notice explains how Hamraz Indian uses personal information on its website, including the online ordering preview. The preview is for testing. No payment is taken and no food is prepared.

Who is responsible

Hamraz Indian is responsible for the customer information described in this notice. Contact us with questions or privacy requests.

Hamraz Indian, Unit 10, Winstanley Shopping Centre, Winstanley, Wigan, WN3 6JA.
Email order@hamrazindian.com or call 01942 213 303.

What we collect and why

• Your name, telephone number, email address, selected dishes, quantities, collection preference and any notes you enter, so staff can review and respond to your order.
• Order references, status, agreed collection time, rejection reason and email submission status, so you and the shop can follow the order.
• Technical information needed to serve and protect the website, such as IP addresses and request information. The preview order database uses a salted hash of the network address for rate limiting, rather than storing it there in plain text.
• Staff account and sign in information to restrict access to customer orders.

Fields marked required are needed to process an online order. If you prefer not to provide these online, call the shop. Please call to discuss allergies and do not put medical history or other sensitive information in the free text boxes.

Our reasons for using information

For real orders and enquiries, we use the information needed to take steps at your request and fulfil your order. We rely on our legitimate interests in operating, securing and testing the service for preview orders, troubleshooting and access controls. We rely on your consent for the optional device memory described below. Where records are required by law, we retain them to meet that obligation.

Remembering your details

If you tick “Remember my details”, we save your name, phone and email, where entered, in this browser’s local storage for 90 days from your last saved change. This is optional and does not create an account. It does not save order notes or sign you up for marketing. Anyone using the same browser profile may see the saved details. Untick the option or select “Forget my saved details” to withdraw consent and remove them. Details expire and are removed when the site next reads them after expiry. Clearing website data also removes them.

Preview and live websites use separate browser storage. Saved details do not automatically transfer between devices or between those websites.

Who receives information

Authorised Hamraz staff can view orders. The service uses Sites hosting and Cloudflare infrastructure for the website and preview order database, Supabase for staff authentication, and Hostinger Mail for order emails. An acceptance or rejection email contains the information needed for that decision. During testing, email sending is restricted to the address enabled by admin.

Choosing Messenger, social media or map links takes you to another provider. Information you send there is handled under that provider’s privacy terms as well as our use of the enquiry. We do not use checkout details to enrol you in marketing.

Where information is processed

Our technology providers may process information outside the UK. The location and safeguards depend on the service and its terms. Contact us for information about the providers and applicable transfer arrangements.

How long information stays

Optional remembered details expire after 90 days. The preview keeps an order reference in your browser so you can check its status and avoid duplicate submissions. Before the shop acknowledges an order, the saved request also contains the submitted details for a safe retry. After acknowledgement, those request details are replaced by a status receipt. That receipt remains until you start another test order or clear website data.

Preview orders and email submission records remain in the shop’s system until they are deleted by the operator. Automatic deletion is not currently configured. Contact us to request removal of your test data. Operational records and correspondence are retained according to the purpose of the enquiry, any unresolved complaint, and applicable legal record keeping needs. Removing browser details does not delete an order already received by the shop or a sent email.

Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your information, and object to processing based on legitimate interests. You can withdraw consent for remembered details at any time without affecting earlier lawful use. Contact us using the details above. We may need to verify your identity. You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Order decisions

Shop staff decide whether to accept or reject orders and set collection times. These decisions are not made solely by an automated system.

Updates

We will update this notice when the service or its use of information changes.