Privacy notice
Last updated: 23 October 2026
This notice explains what personal information we collect when you visit our café, use our website, join the Dosa Chaska rewards app, buy from us, book a workshop or contact us, and what we do with it. We’ve kept it short and plain. If anything is unclear, just ask us.
1. Who we are
Dosa Chaska Ltd is responsible for your information (the “controller”). We’re a company registered in England and Wales, company number 16281713. Registered office: 3rd Floor, 86-90 Paul Street, London EC2A 4NE. Our café: 46B Main Street, Cockermouth CA13 9LU.
For anything about your information, email hello@dosachaska.com, or call or WhatsApp us on the number on our Contact page.
2. What we collect
- Contact details: your name, email address and mobile number, and your postcode if you give it.
- Rewards account: your login email, your member card, your stamp cards, rewards, stars and awards, your birthday (day and month only, if you add it), and your email and WhatsApp choices.
- Purchases: what you bought, when and where (café, takeaway ordered in the app, our website shop), how much you paid, and your collection bookings. We never see or store your full card number: card payments are handled by SumUp and Stripe.
- Curry Club: your balance, collections, use-by date and any extension.
- Messages: emails, website enquiry forms, questions you send in the app, and your ratings and comments about an order.
- Preferences you tell us: dietary needs and allergies (only with your permission, see section 4), spice level and how you heard about us.
- Technical information: what’s needed to keep you signed in and to make the website and app work (see our cookie policy). If you switch on notifications, a code that lets us send them to your phone.
3. Why we use it, and our legal reasons
| What we do | Our legal reason (UK GDPR) |
|---|---|
| Take and fulfil your orders, collections, tickets, vouchers and Curry Club | To perform our contract with you |
| Run your rewards account: stamps, rewards, stars, awards and your app inbox | To perform our contract with you (our rewards terms) |
| Send you messages about your orders, collections, rewards and Curry Club (for example “your order is ready” or “your curries are ready to collect”) | To perform our contract with you |
| Keep sales and tax records | Legal obligation |
| Reply to your enquiries and questions | Our legitimate interest in helping you, or steps before a contract |
| Understand what customers buy so we can plan stock, menus and offers, and group customers by how often they visit | Our legitimate interest in running and improving a small business. You can object at any time. |
| Send you offers and news by email, app notification or WhatsApp | Your consent. If you’ve bought from us, we may email you about similar food and events unless you’ve said no; every marketing email has a one-click unsubscribe. |
| Ask how your order was and invite a review | Our legitimate interest in improving our food and service. You can stop these emails with the link in them. |
| Keep our website, app and systems secure and prevent fraud | Our legitimate interest |
| Note allergies and dietary needs so the team can help you | Your explicit consent, which you can withdraw at any time |
4. Allergies and dietary needs
We only note an allergy or dietary need if you ask us to and agree. We use it only to help you choose safely and to prepare your order. Please always tell the team about an allergy when you order, even if it’s on your record. You can ask us to remove it at any time.
5. Marketing: your choice
You choose whether we send you offers and news, separately for email and WhatsApp, in the app (Account) or by telling us. App notifications can be switched off in the app or in your phone settings. Every marketing email has an unsubscribe link. Saying no never affects your stamps, rewards or Curry Club, and you’ll still get messages about things you’ve ordered.
6. The chat assistant in the app
The “Talk to us” chat in the app uses an AI service, Anthropic, to answer questions about our food, opening times and your own rewards. It sees your question and only the information needed to answer it (for example your stamp count). We don’t keep a copy of your chats on our systems: your phone keeps the conversation until you sign out, or for up to 12 hours. Anthropic processes it only to produce the answer, doesn’t use it to train its models, and keeps it only briefly for safety checks. If you ask for a person, your question and contact details are sent to our team. Please don’t share card details or anything sensitive in the chat.
7. Who we share it with
We never sell your information. We share it only with companies that help us run Dosa Chaska (“processors”), under contracts that require them to protect it:
- Supabase: our customer database (stored in the EU, Sweden)
- SumUp: our café till and card payments at the counter
- Stripe: card payments in the app and in our website shop
- Contabo: the server that runs our website and our customer and email system (FluentCRM)
- Brevo: sends our emails (EU)
- Cloudflare: hosts the rewards app
- Microsoft: our hello@ email account
- Google: “Sign in with Google” if you choose it, the email account that receives online order emails, and the fonts used in the app
- Anthropic: the chat assistant in the app (see section 6)
- Meta (WhatsApp): if you message us on WhatsApp
- Automattic (Jetpack): website security and backups
- Our accountant and professional advisers, and authorities where the law requires it
8. Information sent outside the UK
Some of these companies store or access information outside the UK, for example in the EU or the USA. Where they do, we rely on UK adequacy regulations (including the UK-US data bridge) or approved contract terms (the UK International Data Transfer Agreement or Addendum).
9. How long we keep it
- Sales and tax records: 6 years, as the law requires.
- Rewards account: for as long as you have it. If you delete your account in the app, your login, card and rewards are removed straight away; your purchase records stay as business records and marketing is switched off.
- Customer records with no purchase or contact for 3 years: deleted or anonymised.
- Enquiries and app questions: 2 years after our last reply.
- Marketing choices: until you change them. We keep a record that you said no, so we don’t contact you by mistake.
10. Your rights
You can ask us to see the information we hold about you, correct it, delete it, restrict or object to how we use it (including grouping you for offers), or give you a copy to take elsewhere. Where we rely on your consent, you can withdraw it at any time. Email hello@dosachaska.com. We’ll reply within one month, and it’s free.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
11. Children
Our rewards app is for people aged 16 and over.
12. Changes to this notice
We’ll update this notice when the way we use information changes, and show the date at the top. We’ll tell you about big changes in the app.