Privacy policy
Last updated: September 2026
Dabba ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, and your rights.
1. Information we collect
Account information
When you create a Dabba account, you provide your name, email address, and a password. Cooks may also provide a phone number, neighbourhood, and profile information.
Allergen and dietary profile
You may choose to create an allergen profile in the app. This includes information about food allergies and dietary restrictions you have. This information is stored separately and used only to warn you about allergens in dishes you view or order.
Order information
When you place an order, we collect the dish you ordered, the cook, the delivery or pickup details, and the amount charged. We do not store full payment card information — that is handled by our payment processor.
Usage data
We collect information about how you use the Dabba platform, including pages visited, features used, and device information. This data is anonymised and aggregated where possible.
2. How we use your information
- To process and fulfil your orders
- To show you dishes and allergen information relevant to your profile
- To communicate with you about orders, batches, and your account
- To improve the Dabba platform
- To prevent fraud and enforce our Terms of Service
3. Information sharing
We share your information with:
- Cooks: When you order a dish, the cook receives your name, delivery address or pickup instructions, and your order details.
- Payment processor: Your payment information is processed by our payment processor and we do not store card details on our servers.
- Service providers: We use third-party services for hosting, analytics, and email delivery. They are contractually required to protect your information.
- Legal requirements: We may share information if required by law or in connection with a legal claim.
We do not sell your personal information to third parties.
4. Data retention
We retain your account information for as long as your account is active. Order records are retained for a minimum of 7 years to comply with financial record-keeping requirements. You may request deletion of your account and personal information at any time, subject to legal retention requirements.
5. Your rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and personal information (subject to legal requirements)
- Object to certain uses of your information
To exercise any of these rights, contact us at privacy@dabba.example.
6. Data security
We use industry-standard encryption (TLS/HTTPS) for all data in transit. Passwords are hashed and never stored in plain text. We regularly review our security practices and update them as needed.
7. Cookies
Dabba uses essential cookies to keep you logged in and to remember your preferences. We do not use advertising or tracking cookies. You can disable cookies in your browser, but some features of the site may not work correctly without them.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
9. Contact
Questions about this Privacy Policy? Contact our privacy team at privacy@dabba.example.