Last updated: 13 July 2026
Applies to: Masala customer ordering mobile app (iOS & Android), related ordering systems, and the Masala Killiney website at masala.ie.
Published at: sites.google.com/view/masala-privacy-policy
Masala Restaurants Ltd, trading as Masala (“we”, “us”, “our”), operates:
the Masala customer ordering mobile app (iOS & Android) and related ordering systems; and
the Masala Killiney marketing website at masala.ie.
Address:
Unit 14 Killiney Shopping Centre
Rochestown Avenue
Dún Laoghaire, Co. Dublin, Ireland
A96 KV99
We are the data controller for personal data collected when you place an order, contact us about an order, use our website, or submit an enquiry through the website.
Privacy contact: admin@masala.ie
Phone: (01) 284 0838 · (01) 235 0099
There is no customer account or login in the app. All orders are placed as a guest.
This section describes how we handle personal data when you use our marketing website at masala.ie (the “Website”). It supplements the app-specific information in the sections below.
Browsing the Website
When you visit the Website, we may collect limited technical information such as:
pages viewed and general usage patterns
approximate location (country/region) derived from your connection
browser type, device type, and referrer URL
date and time of visit
We use Vercel Web Analytics for this purpose. Vercel Analytics is designed to be privacy-friendly: it does not use third-party advertising cookies, does not track you across other websites, and does not sell your data. For more information, see Vercel’s privacy policy.
Contact and catering enquiry forms
If you submit a form on the Contact or Catering pages, we collect the information you provide, which may include:
name
email address
phone number (required for catering enquiries; optional on the contact form)
subject or event type
message content
event date, guest count, and venue (catering enquiries only)
We use this information only to respond to your enquiry.
Security checks
Our forms are protected by Cloudflare Turnstile, a bot-detection service. Turnstile may process technical signals from your browser to distinguish genuine visitors from automated abuse. We do not use Turnstile for advertising. See Cloudflare’s privacy policy.
Embedded content
The Contact page includes an embedded Google Maps map to help you find our restaurant. Google may collect data according to its own policies when you interact with the map. See Google’s privacy policy.
Understand how the Website is used and improve it — Legitimate interest
Respond to contact and catering enquiries — Legitimate interest / steps prior to contract
Protect forms from spam and abuse — Legitimate interest
Show our location on a map — Legitimate interest
We do not use Website analytics or form data for advertising or marketing unless you explicitly ask us to (for example, by requesting catering information).
Vercel — Website hosting and privacy-friendly analytics. Privacy: vercel.com/legal/privacy-policy
Cloudflare — Turnstile bot protection on enquiry forms. Privacy: cloudflare.com/privacypolicy
Supabase — Secure processing of enquiry form submissions. Privacy: supabase.com/privacy
ZeptoMail (Zoho) — Sending enquiry notification and confirmation emails. Privacy: zoho.com/privacy.html
Google — Embedded map on the Contact page. Privacy: policies.google.com/privacy
We do not sell Website visitor or enquiry data.
Analytics: Aggregated usage data is retained by Vercel according to their policies.
Enquiry forms: We retain enquiry details for as long as needed to respond and for reasonable business records, unless you ask us to delete them sooner (subject to legal obligations).
Server logs: Limited retention for security and reliability.
The Website does not set advertising cookies. Vercel Analytics and Cloudflare Turnstile may use cookies or similar browser storage strictly for analytics and security. You can control cookies through your browser settings; blocking them may prevent enquiry forms from working.
When you place an order through the app or ordering system, we collect:
name
phone number (stored in international format, e.g. +353…)
email address
order notes (optional)
service type (delivery or collection)
scheduled time (if selected)
basket contents (items, options, quantities, notes)
pricing details (subtotal, delivery fee, tips, total)
payment method (card, Apple Pay, Google Pay, or cash)
For delivery orders, we also collect:
delivery address (street, city, Eircode)
approximate location derived from the address (for delivery zone checks)
delivery zone and delivery fee outcome
We do not use your device GPS.
All card and wallet payments are processed securely by Stripe.
We do not store or have access to:
full card numbers
CVC codes
Apple Pay / Google Pay credentials
Stripe processes payment details to complete transactions and prevent fraud. We only store:
payment status
Stripe payment reference ID linked to your order
We use your data to:
process and fulfil your order (contract)
deliver your food or prepare collection (contract)
validate delivery areas and charges (contract)
process payments securely (contract)
maintain business records and accounting (legal obligation / legitimate interest)
prevent misuse of our ordering system (legitimate interest)
We do not use your app data for advertising or marketing unless you explicitly opt in.
Website-related uses are described in section 2 above.
When you place an order:
Your order is sent securely to our backend
Payment is processed via Stripe if applicable
Orders are automatically accepted for processing once valid and paid (or marked for cash on delivery/collection)
The restaurant system receives your order for preparation and fulfilment
You can track order status using your order link or ID
We only share app and ordering data with trusted service providers necessary to run the service:
Stripe — Payment processing. Privacy: stripe.com/privacy
Google Maps Platform — Used to validate delivery addresses. Privacy: policies.google.com/privacy
Supabase — Hosting, database, and backend infrastructure. Privacy: supabase.com/privacy
HubRise — Used to send confirmed orders to restaurant systems for preparation. Privacy: hubrise.com (see their privacy terms)
Upstash — Used for rate limiting and system security. Privacy: upstash.com/trust
Website-specific providers are listed in section 2.3.
We do not sell your data.
The app may store limited data locally on your device, including:
cart items
checkout details (name, phone, email, address)
last order summary (order ID, items, status)
cached menu data
This data stays only on your device and can be removed by:
uninstalling the app, or
clearing app storage in device settings
Cart data may expire after short inactivity periods.
We retain data for:
Orders: As long as required for business operations, accounting, and legal obligations
Payment records: Retained by Stripe under their policies
Device cache: Temporary (user-controlled)
Server logs: Limited retention for security and system stability
Website enquiries: As described in section 2.4
Some providers (including Stripe, Google, Vercel, Cloudflare, and Supabase) may process data outside the European Economic Area (EEA), including the United States.
Where this occurs, appropriate safeguards such as Standard Contractual Clauses are used.
We take security seriously:
all data is transmitted over HTTPS
payments are handled by PCI-compliant providers (Stripe)
access to systems is restricted to authorised staff
order links use secure tokens to prevent unauthorised access
website forms are protected by Cloudflare Turnstile
No system is 100% secure, but we follow industry best practices.
You may have the right to:
access your personal data
correct inaccurate data
request deletion (where legally possible)
restrict processing
object to processing based on legitimate interests
request data portability
To exercise these rights, contact admin@masala.ie.
For app/order data, see section 16 below for deletion instructions.
For website enquiries or analytics, email admin@masala.ie with the subject line “Website privacy request — Masala”.
We may need to verify your identity.
You can also contact the Irish Data Protection Commission: dataprotection.ie
The app and website are not intended for children under 16. We do not knowingly collect data from children.
We may update this policy from time to time. The latest version will always be available at this page.
Continued use of the app or website after an update constitutes acceptance of the revised policy.
If you have any questions:
Email: admin@masala.ie
Phone: (01) 284 0838 · (01) 235 0099
Address: Unit 14 Killiney Shopping Centre, Rochestown Avenue, Dún Laoghaire, Co. Dublin, Ireland A96 KV99
This section explains how to request deletion of personal data we hold about you.
App / order data
Email admin@masala.ie with the subject line “Data deletion request — Masala App” and include:
your full name
the phone number and/or email address you used when placing orders
approximate date(s) of any orders you want removed (if known)
Website enquiry data
Email admin@masala.ie with the subject line “Website privacy request — Masala” and include:
your full name
the email address and/or phone number you used in the enquiry
approximate date of the enquiry (if known)
We may request additional information to verify your identity before deleting any data.
After we verify your request, and where we are not required to keep records by law, we will delete or anonymise personal data we control, including:
name, phone number, and email address in order records
delivery address and order notes linked to those orders
contact or catering enquiry details submitted through the website
other personal information in those records on our servers
We may retain certain information where required for:
legal, tax, and accounting obligations
payment and fraud prevention records processed by Stripe (see Stripe’s privacy policy for data held by Stripe)
dispute resolution or requests from regulators
We keep retained data only as long as necessary for those purposes.
The Masala app may store a cart, checkout details, last order summary, and cached menu on your device only. To remove this immediately:
uninstall the app, or
go to Settings → Apps → Masala Killiney → Storage → Clear data (Android) or remove the app (iOS)
Cart data on your device may also expire after short periods of inactivity.
We aim to respond to verified deletion requests within 30 days.
Masala Restaurants Ltd
Email: admin@masala.ie
Phone: (01) 284 0838 · (01) 235 0099
Address: Unit 14 Killiney Shopping Centre, Rochestown Avenue, Dún Laoghaire, Co. Dublin, Ireland A96 KV99