Privacy Notice
Thai Thai Authentic Foods uses personal information to prepare food orders and, where permitted, to email customers about our own similar food and offers.
Food orders
When you order, we collect your name, phone number, email address, order and payment details, plus a delivery address and any notes you provide when relevant. We use them to process payment, prepare your food, arrange collection or delivery, answer questions, and send order confirmations or status updates. These service emails are separate from marketing.
We use order details to fulfil your purchase and retain records where accounting or other legal obligations require it. We use limited security records to protect the ordering and email systems from abuse.
Marketing emails and your choice
When you complete an order with us and do not tick “No marketing emails, thanks” beside your email address, we may email you about Thai Thai’s own similar food, menu news and offers. This uses the customer “soft opt-in” under the UK electronic marketing rules and our legitimate interests in keeping customers informed. It does not require a separate confirmation email. You can decline at checkout without affecting your order.
You can also ask to subscribe using the website’s email subscription popup. For that separate request, we send a confirmation link and only activate it after you confirm. We record the email, the source and date of the marketing permission, and the outcome of campaign sending.
Every marketing email has an unsubscribe link. You can also use the website popup to unsubscribe. We then stop marketing and retain a minimal, separate suppression record containing your email address and opt-out date/time so we can honour your choice and demonstrate compliance. An opt-out is not undone by a later food order; you may explicitly subscribe again if you change your mind. Unsubscribing does not affect food orders or necessary order emails.
Workplace lunch messages and orders
You can separately join our workplace lunch service. We collect your name, workplace name, email, phone number, workplace delivery address and chosen delivery-time preference. Confirmed orders retain their booked delivery window when your preference is later changed. You choose to receive daily lunch offers by email and verify your address before joining. A separate, optional choice allows us to send the same offers by SMS to your registered UK mobile. Email permission alone does not enable texts. Existing members can enable or disable texts through “Unsubscribe / manage lunch messages” in an offer. We record the chosen mobile, notice version, permission source and date/time, and later opt-outs. Staff changing your mobile number switches SMS off until you give permission for the new number. Ordinary food orders and the previous business mailing list do not automatically enrol you in workplace lunch messages.
Each offer contains a personal link. We record your confirmed response, meal quantity and payment choice to manage your order and the day's available meals. Opening the link alone does not order food or unsubscribe you. Card payments are processed by Stripe; Pay later orders are recorded as unpaid until staff record payment. The unsubscribe option in each offer stops workplace lunch emails and texts, without cancelling existing orders or changing your separate food-update preference. Switching texts off alone keeps lunch emails active. The website’s general marketing unsubscribe stops food updates and workplace lunch messages. Historic business invitation and opt-out records are retained to honour earlier choices; that invitation service has closed.
Who receives the information
For delivery-area checks and approximate delivery-map pins, we send postcodes to Postcodes.io. Staff delivery maps load background map tiles from OpenStreetMap; customer names, emails and phone numbers are not included in these requests. When staff choose navigation, the booked delivery addresses are passed to Google Maps for directions. Staff can correct lunch contact details; we record the changes, while already-booked orders retain their original delivery details.
Authorised Thai Thai staff can access order information in our admin, kitchen and delivery screens. Our website host and email provider process information to run the site and deliver email. Opted-in lunch texts pass through our SMS gateway at sms.emre.co.uk, its connected Android sending device and mobile network. These receive your mobile number and SMS text, including the personal offer/unsubscribe links; they do not need your delivery address or customer profile. Gateway acceptance records mean queued for sending, not confirmed mobile delivery. An already-queued text may still arrive after opting out. Stripe processes online card payments. We do not sell your details.
How long we keep it
We retain order records for business, accounting, food safety and legal purposes. We keep active marketing details while you remain eligible to receive messages, and review inactive contact details periodically. Unconfirmed subscription requests expire after 24 hours and are periodically cleared. We retain consent and opt-out evidence for as long as reasonably needed to honour and demonstrate your choice. Stored website SMS contents and reusable send tokens are cleared 30 days after the offer deadline by our background worker; send-outcome and consent records are retained separately. Short-lived, one-way hashed connection identifiers limit subscription-form abuse; workplace-lunch request limits are cleared after one day.
Your choices and contact
You can ask what personal information we hold, request correction, or ask us to delete information where applicable. You can object to marketing or withdraw subscription consent at any time. Contact orders@thaithaifoods.com. You may also raise a data protection concern with the UK Information Commissioner’s Office.
Allergies: Please contact us before ordering. Do not rely on an order note alone for important allergy information.
Thai Thai Authentic Foods
2a Grove Avenue, New Costessey, Norwich, NR5 0HN
Last updated: 13 October 2026.