Privacy
Privacy notice
Last updated 25 September 2026
We collect as little as we can: only what we need to take your order, keep your account and give you your rewards.
Who we are
Roni's Belsize, 39-37 Belsize Lane, London NW3 5AS, is responsible for your personal information (the "controller"). For anything about your data, e-mail info@ronisonline.com.
What we collect and why
| Information | Why | Legal basis | How long |
|---|---|---|---|
| Orders: your name, e-mail, phone, what you ordered, collection time, notes | To make your order, tell you about it and keep our accounts | To perform our contract with you; legal obligation (tax records) | 6 years, as tax law requires |
| Allergies and dietary needs you tell us | Only to prepare your food safely | Your explicit consent, given when you tell us | Kept with the order |
| Your account: e-mail address, when you joined, when you agreed to this notice | To sign you in and show your account | Your consent (the box you tick when you sign up) | Until you delete your account |
| Sign-in codes | To check it's really you | Your consent | 10 minutes, stored only in scrambled form |
| A photo you upload for a printed cake | To print it on your cake | To perform our contract with you | 60 days |
Payments: card payments are taken on Square's secure page. We never see or store your card number. If you choose to save a card for next time, Square keeps it, not us.
Coming soon to accounts: loyalty points (every 10th hot drink free), account credit and offers. These are held in our till system (Square) against your account, so they work in the shop and online. We'll update this notice before they start.
We don't sell your information, and we don't use it for advertising.
Who helps us
- Square: payments, orders and our till, and in future loyalty and gift cards.
- Cloudflare: hosts this website and stores accounts.
- Resend: sends our e-mails, such as sign-in codes.
They act only on our instructions. Some of them may process data outside the UK; when they do, it's protected by the safeguards UK law requires (such as the UK International Data Transfer Addendum).
Cookies and your browser
We use one cookie, only when you sign in, to keep you signed in (30 days). It's strictly necessary, so we don't ask for cookie consent. Your basket and order-in-progress are kept in your own browser, not sent to us until you order. We use no tracking or advertising cookies.
Your rights
Under UK data protection law you can:
- see the information we hold about you (your account page shows all of it);
- ask us to correct it;
- delete your account at any time from your account page, or ask us to erase your information;
- withdraw your consent: deleting your account does this;
- object to or restrict how we use it, and ask for a copy to take elsewhere.
E-mail info@ronisonline.com and we'll reply within one month. When you delete your account, we erase it straight away. Order records we must keep for tax are kept for 6 years and not used for anything else.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Changes
If we change this notice in a way that matters, we'll ask you to agree again the next time you sign in.