What we collect, and what we do with it.

Who is responsible

Tiffin Service Dubai cooks in its own kitchens in Bur Dubai and Business Bay, Dubai, United Arab Emirates. You can reach us on WhatsApp at +971 55 713 3786 or by email at hello@tiffinservice.ae.

What we collect

• Your name, so we know whose box it is.
• Your phone number, because ordering and delivery happen over WhatsApp.
• Your email address, so your quote and order record have a second reply channel.
• Your delivery address — area, building, floor or flat — so a driver can find you.
• Your food preferences: vegetarian or not, spice level, and anything you tell us to leave out.
• Your meal-assistant messages, which are sent to Anthropic so the assistant can answer your questions and organise your request. We do not save the raw conversation in our CRM.
• A short meal-interest summary, generated from an unfinished chat and limited to order signals such as the plan, meal preference, area and requested start timing. This anonymous summary does not contain your name, phone number, email address, exact address, IP address or browser details.
• Your plan and payment history, so we know what you paid for and what you are owed.
• Your referral and partner records, including the code used, attributed registrations, received-payment commission and payout status.
• Referral-link activity, stored with anonymous browser, IP and device hashes so partners can see measured views and clicks without seeing a visitor’s identity.
• One-time partner login records, stored as unreadable token hashes with an expiry time so you can open your Partner CRM without a password.

We do not collect your date of birth, your ID, your Emirates ID number or your card details. We do not sell or share anything with data brokers, and we run no advertising or retargeting pixels — nothing here follows you to another website. We do use two analytics tools that count visits and record how pages are used; they are named below.

Why we collect it

To cook and deliver the food you ordered, to contact you about your own deliveries, to provide the Partner CRM, apply referral discounts, calculate commission from payments received, take and record payment, and to keep the records a food business in Dubai is required to keep. Nothing else.

Allergy and dietary information

If you tell us about an allergy or a medical dietary requirement, we use it only to prepare your food safely. Please give us that information over the phone or by email rather than in a WhatsApp message, so it is not stored on a third party's servers.

How the meal assistant works

The free-text meal conversation is sent to Anthropic's Claude service so it can answer questions about our published plans and organise your meal preferences. We ask you not to put your name, phone number, email, exact address or medical information in the free-text conversation. After answering your first question, the website may separately ask for your name, Dubai area and WhatsApp number inside the chat interface. Those fields go directly to our own enquiry system and are not added to the conversation sent to Anthropic. Your email and exact delivery address are collected later when you complete the secure details card. If you voluntarily type personal information into the chat, it will be included in the text sent to Anthropic. After the assistant answers, our system may keep only a short structured summary of the meal request so we can understand where visitors need help. We do not keep the raw chat transcript in our CRM. An unfinished summary is automatically deleted after fourteen days. If you choose to save your contact details, that summary is removed from the unfinished-chat list and attached to your enquiry. A person reviews and confirms custom requests, availability, delivery timing and the final start date before any payment.

Who else sees it

• Anthropic, which processes the free-text meal conversation to generate the assistant's reply and organise the meal request. We do not intentionally send the separate contact fields or later secure details card to Anthropic.
• Meta Platforms, if you contact us through WhatsApp. Your message and phone number pass through and are stored on their systems, which are outside the UAE, under their own privacy terms.
• Our delivery driver, who sees your name, address and phone number for the deliveries they are making that day.
• Our web host, which stores this website and any message you send through it on servers in Germany.
• Cloudflare, which sits in front of this website and serves it to you. Every request to the site passes through them.
• Google, through Google Analytics, which counts visits and tells us which pages people read and which buttons they press.
• Microsoft, through Clarity, which records how pages are used — scrolling, taps, and where people get stuck — so we can fix what is confusing. It is a Microsoft advertising product, though we do not use it to advertise to you.

Everyone on that list except our driver is outside the UAE, so your information leaves the country. We keep what crosses the border to the minimum needed to get a box to your door, and we do not send allergy or health information through WhatsApp.

We do not sell your information to anyone, for any purpose.

How long we keep it

Anonymous unfinished meal-assistant summaries for up to fourteen days. We do not keep the raw meal-assistant transcript in our CRM. Contact and delivery details for as long as you are a customer, and for twelve months afterwards in case you come back or a question arises about an old order. Payment records for as long as UAE law requires us to keep accounts. Waitlist entries until we open, or until you ask us to remove yours.

Your rights

Under UAE Federal Decree-Law 45 of 2021 you can ask us to:

• tell you what we hold about you;
• correct anything that is wrong;
• delete it, unless we are required to keep it;
• stop processing it, or restrict what we do with it;
• send it to you in a portable form;
• stop using it for direct marketing, which you can do at any time.

Message +971 55 713 3786 or email hello@tiffinservice.ae and we will action it. There is no charge, and we will not ask you why.

If something goes wrong

If your information is exposed or misused, we will tell you and the UAE Data Office what happened, what was affected and what we are doing about it. We are not quoting a fixed notification deadline here because the PDPL's Executive Regulations have not yet been issued — we would rather say that than invent a number.

Complaints

Come to us first — it is faster. If we do not resolve it, you can complain to the UAE Data Office, and for consumer matters to the Ministry of Economy and Tourism on 800 1222.

Changes

If this notice changes in a way that affects you, we will say so at the top of this page and, if it is significant, message you.