Privacy Policy

Seven Six Group is a Dubai-based hospitality holding company operating a portfolio of delivery-first restaurant brands out of a single production kitchen in Business Bay, Dubai, United Arab Emirates.

For the purposes of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"), we are the "controller" of any personal data collected through this website.

This website is an informational storefront for our brands. It does not take online orders, does not have login accounts for customers, and does not accept payments. As a result, the personal data we collect through this website is minimal:

• Standard server logs — IP address, browser type, pages visited, timestamps — kept by our hosting provider (Vercel) for security and operational purposes.
• Cookies — we do not currently set analytics or advertising cookies on this site. If that changes we will update this page.
• Contact information you send us voluntarily — if you email or call us using the details in the footer, we retain the message and your contact details for as long as needed to respond.

All ordering happens through Talabat, a third-party delivery marketplace operated by Delivery Hero. When you order any of our brands, you interact with Talabat's app or website — not this one — and Talabat is the controller of your personal data for that transaction (name, delivery address, phone number, payment method).

We receive from Talabat only the operational information we need to prepare and fulfil your order (item, quantity, special instructions, delivery time window, anonymised order reference). Please refer to Talabat's privacy policy for how they handle your personal data.

The limited personal information we handle is used only for:

• Operating and securing this website
• Responding to enquiries you send us
• Preparing food orders passed through by Talabat
• Financial record-keeping and tax compliance under UAE law
• Investigating complaints, disputes, and legal claims

We do not sell personal data. We do not use it for behavioural advertising. We do not share it with third parties except as described in Section 5.

Categories of third parties we may share limited personal data with:

• Hosting and infrastructure — Vercel (website hosting) and Supabase (database + file storage) — technical processors that hold data on our behalf.
• Talabat — as described in Section 3, for order fulfilment.
• Government authorities — where required by UAE law (e.g. Dubai Municipality, Federal Tax Authority, Dubai Police).
• Professional advisors — accountants, auditors, lawyers — bound by confidentiality.

We do not transfer personal data outside the UAE except to the hosting providers listed above (both operate globally with regional data centres and standard contractual data-processing terms).

We keep personal information only as long as necessary for the purpose it was collected, or as required by UAE law (typically five years for financial and tax records). Enquiry emails are deleted 12 months after the matter is closed unless a specific reason requires longer retention.

Under the UAE PDPL, you have the right to:

• Know what personal data we hold about you
• Ask us to correct information that is inaccurate
• Ask us to delete information that is no longer needed for the purpose it was collected
• Object to specific uses of your data
• Withdraw any consent you previously gave us
• Lodge a complaint with the UAE Data Office

To exercise any of these rights, contact us using the details in Section 9. We aim to respond within 30 days.

We use HTTPS across the site, role-based access control on our internal admin systems, and encryption at rest for stored documents. Access to personal data is limited to staff members who need it for their role. No system is perfectly secure — if we ever become aware of a security incident affecting your personal data, we will notify you and the relevant authority as required by law.

Questions about this policy, or requests about your personal data:

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be highlighted on the homepage for at least 30 days after publication.