Privacy Policy

 

DabbaDrop. Privacy Policy

Last updated: 24 February 2026

1. Who we are

This website and our services are operated by Madras Curries Private Limited, trading as DabbaDrop.

  • Registered office: Accrida Regus House, Admirals Park, Victory Way, Dartford, United Kingdom, DA2 6QD

  • Company number: 11305503

  • Email: hello@dabbadrop.co.uk

For data protection purposes, we are the data controller for the personal data described in this Privacy Policy.

2. What this policy covers

This Privacy Policy explains how we collect, use, share, and protect your personal data when you:

  • visit our website

  • place an order or subscribe

  • contact customer support

  • enter a competition or promotion

  • interact with our marketing, ads, and analytics tools

This policy should be read alongside our Terms of Service, Terms of Business (Subscriptions), and any cookie information shown on our site.

3. The personal data we collect

We collect personal data in the following ways.

Information you give us

  • name, email address, phone number

  • delivery address and postcode

  • account login details, if you create an account

  • order history and subscription preferences

  • dietary notes you choose to provide

  • communications with us, including emails and messages

  • competition entries and any information required to administer prizes

Information we collect automatically when you use our site

  • device and browser information

  • IP address and approximate location derived from IP

  • pages visited, clicks, time on site, and referral source

  • cookie and tracking data, depending on your cookie choices

Information from third parties

  • payment confirmation and dispute information from payment providers

  • delivery status information from couriers or delivery platforms

  • advertising and attribution data from platforms like Meta and Google, where cookies or similar technologies are enabled based on your preferences

4. Why we use your data and our lawful bases

UK data protection law requires us to have a lawful basis for using personal data. The main bases we rely on are the following.

Contract. to provide your order and subscription

  • process orders and payments

  • deliver your meals and manage any dabba related returns where relevant

  • manage your subscription, skips, pauses, and cancellations

  • provide customer support and service communications

Legitimate interests. to run and improve our business

  • prevent fraud and misuse of our services

  • maintain website security and performance

  • understand how customers use our site and improve user experience

  • manage complaints and resolve disputes

  • invite feedback and reviews about your purchase, where appropriate

Legal obligation. to comply with law

  • accounting, tax, and regulatory obligations

  • responding to lawful requests from regulators or law enforcement

Consent. where required

  • sending marketing emails and SMS where you have opted in

  • using non essential cookies and similar technologies, where consent is required

5. Service communications versus marketing

Service communications are messages we send to deliver the service you asked for. For example. order confirmations, billing notices, delivery tracking, operational updates, changes to delivery windows, and customer support messages. These are not marketing.

Marketing communications include emails or texts about offers, new products, and promotions. We will only send these where we have a valid lawful basis. Usually consent, or soft opt in where it applies. You can unsubscribe at any time using the link in our emails or by contacting hello@dabbadrop.co.uk.

6. Who we share your data with

We share personal data with trusted service providers where needed to operate DabbaDrop. These include:

  • E commerce and subscriptions. Shopify and subscription tools used on our site

  • Payments. payment processors and fraud prevention tools

  • Delivery and logistics. bicycle couriers and delivery partners, including sharing your phone number where needed to complete delivery

  • Customer service. support inbox tools and related systems

  • Email and messaging. email marketing and service message providers

  • Analytics and performance. analytics and tag management tools

  • Advertising. platforms that help us measure and deliver ads, where enabled in line with your choices

  • Accounting. finance and bookkeeping tools, for example Xero

  • Feedback and reviews. review platforms, where used

  • AI and LLMs 

    We use [Open AI/Anthropic] to provide customer support, personalise your experience, or analyse data. To do this, we may process your name and email address alongside any specific prompts or information you provide directly to the AI. Please be advised that our AI service providers (such as Anthropic) do not use your submitted data, inputs, or outputs to train or improve their foundational AI models. Your information remains strictly segregated for our organisation's use. We will not use your personal data or conversation inputs to train or improve third-party AI models.

We do not sell your personal data.

7. International transfers

Some of our suppliers process data outside the UK. When we transfer personal data internationally, we use appropriate safeguards where required. This typically includes contractual protections such as the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

8. How long we keep your data

We keep personal data only for as long as needed for the purposes described in this policy.

Typical retention periods depend on the context. For example:

  • orders and payments may be retained for accounting and tax purposes

  • customer support records may be retained to manage queries, complaints, and quality investigations

  • marketing data is retained until you unsubscribe, or we no longer need it for the purpose collected

  • analytics and cookie data is retained in line with tool settings and your cookie choices

If you want more detail on retention periods for specific categories, email hello@dabbadrop.co.uk.

9. Your rights

You have rights in relation to your personal data, subject to certain legal conditions. These include the right to:

  • access your personal data

  • correct inaccurate data

  • request deletion of your data in certain circumstances

  • restrict or object to certain processing

  • data portability in certain circumstances

  • withdraw consent at any time where we rely on consent

  • complain to the Information Commissioner’s Office, ICO

To exercise your rights, contact hello@dabbadrop.co.uk. We may need to verify your identity before responding.

10. Cookies, pixels, and similar technologies

We use cookies and similar technologies, including pixels and tags, to:

  • make the website work and enable checkout

  • remember preferences

  • understand site usage and improve performance

  • measure marketing performance and show relevant ads, where enabled

Some cookies are strictly necessary for the website to function. Others, such as analytics and marketing cookies, may be optional and will depend on your cookie choices. You can manage your preferences through the cookie banner and by adjusting browser settings. Please note that disabling certain cookies may affect site functionality.

11. Security

We take appropriate technical and organisational measures to protect personal data. However, no method of transmission over the internet is completely secure. Any transmission is at your own risk.

Where you have a password for your account, you are responsible for keeping it confidential.

12. Links to other websites and social media

Our website may include links to other websites or social media platforms. Once you leave our site, we do not control those sites and are not responsible for their privacy practices. Please review their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, contact: hello@dabbadrop.co.uk

Optional section. Tools we may use

We use third party tools to operate our website, deliver orders, process payments, send emails, measure performance, and manage advertising. These tools may change over time. Current or recent tools may include. Shopify, payment providers, email marketing platforms, Google Tag Manager, Google Analytics, Meta Pixel, Hotjar, and accounting tools such as Xero.