Privacy Policy

Privacy Policy

Effective Date: 8 July 2026

This Privacy Policy explains how Aggtech UK Ltd, trading as DishDrop ("DishDrop", "we", "us", or "our"), collects, uses, stores and protects your personal information when you visit www.dishdropmeals.co.uk, use our mobile application, or place an order through our services.

We are committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK privacy laws.

By using our website or mobile application, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who We Are

DishDrop is a trading name of:

Aggtech UK Ltd t/a DishDrop

Website: www.dishdropmeals.co.uk

Email: Nikhilaggarwal610@gmail.com

For the purposes of UK data protection legislation, Aggtech UK Ltd is the Data Controller responsible for your personal information.

2. Information We Collect

Depending on how you use our services, we may collect the following information.

Information you provide

When placing an order or contacting us, you may provide:

Providing dietary information is entirely optional. If you choose to provide this information, we will only use it for the purpose of fulfilling your food order safely.

Payment Information

Payments are processed securely by Stripe.

We do not store your full debit or credit card details.

When making a payment, your payment information is collected directly by Stripe and processed in accordance with Stripe's own Privacy Policy.

We may receive limited information from Stripe including:

Information collected automatically

When you visit our website or mobile application we may automatically collect:

3. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience.

Cookies help us:

We may use:

We currently use services including:

You can control cookies through your browser settings. Disabling some cookies may affect the functionality of our website.

4. How We Collect Information

We collect information when you:

Some information is collected automatically through cookies and analytics technologies.

5. How We Use Your Information

We use your information to:

We will never sell your personal information.

6. Lawful Basis for Processing

Under UK GDPR we rely upon the following lawful bases.

Contract

Where processing is necessary to:

Legitimate Interests

We process information where necessary for our legitimate business interests including:

We always balance these interests against your privacy rights.

Legal Obligation

We process information where required by law, including:

Consent

We rely on consent for:

You may withdraw consent at any time.

7. Marketing Communications

If you subscribe to receive updates, promotions or offers, we may contact you by:

Where required by law, we will only send marketing communications where you have provided consent or where the soft opt-in rules apply.

You may unsubscribe at any time by:

Opting out of marketing will not prevent us from sending important service communications relating to your orders.

8. Sharing Your Information

We only share your information where necessary.

Recipients may include:

All third parties are required to protect your personal information appropriately.

9. International Transfers

Some of our third-party service providers may process information outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place including:

10. Data Security

We implement appropriate technical and organisational measures to protect your information.

These measures include:

Although we take reasonable precautions, no internet transmission can be guaranteed to be completely secure.

11. Data Retention

We only retain personal information for as long as necessary.

Typical retention periods include:

Order information:
Up to 7 years for tax and accounting purposes.

Customer enquiries:
Up to 3 years.

Marketing records:
Until consent is withdrawn or no longer required.

Website analytics:
Typically between 14 and 26 months depending on the provider.

Where required by law, information may be retained for longer.

12. Your Rights

Under UK GDPR you have the right to:

Requests can be made by contacting us using the details below.

13. Children's Privacy

Our services are not intended for children under the age of 18.

We do not knowingly collect personal information from children.

If we become aware that personal information relating to a child has been collected without appropriate consent, we will delete it promptly.

14. Third-Party Websites

Our website or app may contain links to third-party websites.

We are not responsible for their privacy practices.

We recommend reviewing their privacy policies before providing personal information.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Updated versions will be published on our website together with the revised effective date.

Where changes are significant, we may notify users through our website or by email where appropriate.

16. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us.

Aggtech UK Ltd t/a DishDrop

Website: www.dishdropmeals.co.uk

Email: Nikhilaggarwal610@gmail.com

If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

https://ico.org.uk/

17. Your Acceptance

By using the DishDrop website or mobile application, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described within it.