Last updated: 30 October 2026
Who we are
Tasty's Chicken, 19–21 Manchester Street, Luton LU1 2QB. We are responsible for the personal information collected through tastysluton.co.uk and the Tasty's Luton app. Questions about your data? Email or call .
What we collect, and why
- Your order: your name, mobile number, the food you choose (including your peri peri heat), any kitchen notes such as allergies, and the collection or delivery time. We need these to make your order and contact you about it.
- Delivery details: your address and postcode, to check you are within 3 miles of the shop and bring your food.
- Taste Buds account (optional): your name, username, mobile number, email and a securely scrambled (hashed) password. We use these to sign you in, show your past orders and keep your Chilli Points and rewards.
- Order chat: messages you send us about an order, so the counter can reply.
- Contact form and reviews: what you write to us and the contact details you give, so we can reply. Reviews you post may be shown on our website.
- Text codes: when you place an order, create an account or reset your password, we text a one-time code to your mobile to check it's really you.
- Notifications (optional): if you turn on order alerts, we store a technical address from your browser or phone so we can send them. You can turn them off at any time in your phone's settings.
The legal basis for most of this is that we need it to take and deliver your order (a contract with you). Checking orders are genuine and blocking abusive orders are in our legitimate interests. Optional extras like your account and notifications are based on your consent, which you can withdraw at any time.
Payments
Tasty's is cash only. We take no card payments online or in the shop, so we never collect or store card details.
Who we share it with
We never sell your information or use it for advertising. We only share what is needed with the services that run our website and ordering system:
- Cloudflare: hosts our website and runs our ordering system, which stores orders securely
- Twilio: sends the one-time text codes
- postcodes.io: looks up your postcode to check the delivery distance (only the postcode is sent)
- Google: provides the fonts on our pages and the map on our Contact page
- Apple and Google: deliver notifications to the Tasty's Luton app on iPhone and Android
Our staff see order details on the counter screen and the printed ticket so they can make and deliver your food.
Cookies and storage
We don't use advertising or tracking cookies. Your browser or the app keeps a few things on your device so the site works: your basket, your chosen heat, your sign-in, the code of your last order, and whether you've asked for notifications. Clearing your browser data removes them.
How long we keep it
- Orders: up to 6 years, because we need sales records for tax and accounts.
- Account: until you delete it. Chilli Points expire after 12 months without an order.
- Messages and contact-form enquiries: up to 2 years.
- Text codes: deleted once used or expired.
Deleting your account
Signed in? Go to Your account and choose Delete my account. This deletes your account, points and rewards straight away. You can also ask us by email or phone. Past orders are kept for our records but are no longer linked to you.
Your rights
Under UK data protection law you can ask to see the information we hold about you, correct it, delete it, or object to how we use it. Contact us using the details above and we'll respond within one month. If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Our website and app are not aimed at children under 13, and we don't knowingly collect their information.
Keeping it safe
Everything is sent over secure HTTPS connections, passwords are stored scrambled, and only the shop's staff can see orders and customer details.
Changes
If we change this policy we'll update the date at the top of this page.