Who this policy covers
This Privacy Policy applies to the Nawabi Bites customer website, customer accounts, online ordering, table reservations, reviews, loyalty features, and related communications. Nawabi Bites is responsible for deciding how customer information is used for these services.
Restaurant staff and internal SUFRA RMS accounts are governed by separate workplace and operational policies.
Information we collect
Depending on how you use our services, we may collect:
- Identity and contact details, including your name, email address, phone number and delivery address.
- Account information, authentication identifiers and account preferences. Passwords are handled by our authentication provider and are not visible to restaurant staff.
- Order details, selected dishes, customisations, notes, totals, payment status, delivery or table information, and order history.
- Reservation details, including date, time, party size, notes and confirmation status.
- Loyalty balances, points activity, reviews, ratings and messages you choose to send us.
- Basic technical information required for security and service delivery, such as device, browser, IP address, session cookies and diagnostic records.
Please do not include medical, financial or other highly sensitive information in free-text order, reservation or contact notes.
How and why we use information
We use information to create and secure accounts; prepare, fulfil and track orders; manage reservations; calculate loyalty rewards; communicate confirmations and service updates; respond to enquiries; prevent fraud or misuse; improve restaurant service; maintain financial and operational records; and meet legal obligations.
We do not sell customer personal information. Promotional messages are sent only where permitted, and you may ask us to stop them at any time.
When information is shared
Information is shared only where reasonably necessary with:
- Authorised Nawabi Bites team members and the branch preparing or delivering your order.
- Service providers that support authentication, database hosting, email delivery, maps, website hosting, payment confirmation, analytics or technical support.
- Delivery personnel, limited to the details needed to complete a delivery.
- Government, regulatory or law-enforcement bodies where disclosure is required by applicable law or necessary to protect people, rights or systems.
Providers are expected to use information only for the services they supply and to apply appropriate safeguards.
Payments and account security
The website may present cash, bank-transfer or supported wallet options. Nawabi Bites does not ask you to enter complete card credentials into ordinary order notes. Where a third-party payment service is offered, that provider’s privacy terms also apply.
You are responsible for keeping your login details private. Notify us promptly if you believe your account has been used without permission.
Cookies and similar technology
Essential cookies keep you signed in, preserve security, remember an active order session and complete authentication redirects. We may also use limited performance information to understand whether the website is functioning correctly. Blocking essential cookies can prevent account and checkout features from working.
Retention and protection
We retain information only for as long as reasonably needed for the purposes described above, including customer support, food-safety follow-up, accounting, dispute handling, fraud prevention and legal recordkeeping. Retention periods differ by record type.
We use role-based access, authenticated systems and technical safeguards intended to protect information. No internet service can promise absolute security, but we review access and limit it to legitimate restaurant operations.
Your choices
You may request access to, correction of, or deletion of customer account information, or object to non-essential marketing. Some order, payment and audit records may need to be retained where required for legitimate operational or legal purposes.
You can also choose to order as a guest where that option is available, although certain history and loyalty features require an account.
Children and family orders
Customer accounts and online orders are intended for people able to enter a lawful transaction. A parent or guardian should supervise any use by a minor and should not allow a child to provide personal information without permission.
Changes and contact
We may update this policy when our services or legal obligations change. The revised effective date will appear at the top of this page. Material changes may also be highlighted within the website.
For privacy questions or account requests, contact us through the Contact page.