Privacy Policy

This Privacy Policy explains how Heat Cafe ("we", "us") collects, uses, shares and protects your personal data when you use our website and order food from us. We are committed to protecting your privacy in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

By creating an account or placing an order, you agree to the practices described in this policy.

Account details: your name, phone number, and email address.

Delivery information: your delivery address, building/floor/apartment details, any delivery notes, and the map location (GPS coordinates) you set for your order.

Order information: the items you order, order history, and any special instructions.

Payment information: when you pay by card, your card details are collected and processed directly by our payment provider, Stripe. We never see or store your full card number — we only keep a secure reference and the card brand, last 4 digits and expiry so you can reuse a saved card.

Technical information: your saved cart and preferences are stored in your browser; we use your login session to keep you signed in.

To create and manage your account and let you sign in.

To process, prepare, deliver and track your orders.

To take payment and issue receipts.

To contact you about your order (for example, order status, or if our team or a delivery rider needs to reach you).

To improve our menu and service, and to keep the website secure and working correctly.

Payment processing: Stripe processes your card payments securely on our behalf.

Delivery: when you order delivery, we share your name, phone number, address and location with the delivery rider assigned to your order so they can deliver it.

Hosting: our website and database are hosted on Supabase and Vercel, which store your data securely on our behalf.

We do not sell your personal data to anyone. We only share it with third parties who help us run the service, or where we are required to by law.

Your data is protected by encryption in transit and access controls that ensure you can only see your own account, orders and addresses.

Card details are handled entirely by Stripe under PCI-DSS standards and never touch our own systems.

We keep your account and order data for as long as your account is active, and as needed to provide our service and meet legal, accounting and tax obligations. You can ask us to delete your account at any time.

You have the right to access, correct, or delete your personal data. You can update your name, phone, email and password, and manage your saved addresses and cards, at any time from the "My Profile" section of your account.

To request deletion of your account or ask any privacy question, contact us at info@heatcafe.ae.

We use your browser’s local storage to remember your cart, your language and your login session so the site works smoothly. We do not use third-party advertising trackers.

Our service is intended for adults. We do not knowingly collect personal data from children under 18 without the consent of a parent or guardian.

We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated date.

If you have any questions about this policy or your data, contact us at info@heatcafe.ae or 800-328.