Privacy notice

Who we are

Backyard Africa is the controller of the personal information described in this notice. You can contact us at 25b Bury New Rd, Prestwich, Manchester M25 9JZ, by phone on 07586 887441, or by email at admin@backyardafrica.co.uk.

Information we collect

For a direct collection order, we collect your name, email address, mobile number, basket, requested collection date and time, payment status and order reference. For supervised dine-in ordering, we collect the first name or nickname you provide, table session, basket, allergy-response choice, order status and till-settlement record. When an allergy conversation is required, staff record only the practical kitchen outcome agreed with you, not your wider medical history. If you optionally join the Backyard Family, we collect your first name, email address, the wording and time of your email-marketing consent, and the issue and redemption state of your welcome reward. When you call, email or message us, we also receive the information you choose to include in that conversation.

Why we use it

We use order information to create and fulfil your order, confirm payment and collection, answer questions, prevent duplicate or fraudulent transactions, and keep records needed for customer service, accounting and legal obligations. We use Backyard Family details only to administer the promised reward and, where you have actively agreed, send Backyard Africa news and offers by email. Joining is optional and is never required to see the menu, use guest Wi-Fi or order.

Our reasons under data protection law

We process order information because it is needed to take steps at your request and fulfil the order contract. We keep records where needed for legal and accounting obligations. We use limited contact and security information for our legitimate interests in answering customers, protecting payments and resolving order problems. We rely on your consent for Backyard Family email marketing; you can withdraw it at any time without affecting earlier lawful use.

Services that help us

Stripe handles card payment. Google Firebase supports secure order processing and storage. WhatsApp, Instagram, phone and email providers process messages you choose to send. Uber Eats, Deliveroo and Just Eat handle orders placed on their own platforms under their own privacy terms.

Basket and private status storage on your device

For collection, the site saves your current basket in local storage so it remains while you move between pages; it does not contain your name, email or card details. For dine-in ordering on your own phone, a private order-status token remains in that browser tab for up to four hours and is never placed in the page address. On a shared house iPad, the guest name, basket, private token and screen history clear 15 seconds after a confirmed submission. A failed or uncertain submission keeps the basket on that device so it is not silently sent again.

How long we keep it

Routine dine-in guest labels and practical allergy notes are anonymised after 30 days. Private status access expires earlier: after four hours, when the table session closes, or shortly after the order reaches its final state. Financial totals and business records are kept separately for the period required by our accounting and legal obligations. Backyard Family consent and reward records are reviewed and kept only while needed to honour your choice, administer the reward and demonstrate that choice. Other records are deleted or anonymised when no longer needed.

Your choices

You can unsubscribe from marketing using the link in each marketing email or contact us to withdraw consent. You can also ask us about the information we hold about you, or request a correction or deletion where the law allows. Contact us using the details above. You can raise a concern with the UK Information Commissioner’s Office.