Food ordering privacy policy
Away Resorts • food2go-powered ordering and accounts • Draft for review 21 October 2026
1. Who is responsible
Away Resorts Limited (‘we’, ‘us’, ‘our’) is the controller responsible for your information in this food-ordering service. Cornershop Online Limited, trading as food2go, is our processor and your privacy contact at support@food2go.co.uk. food2go handles privacy enquiries, rights requests and complaints on our instructions; we remain responsible as controller.
This notice covers the food2go-powered ordering website, accounts and loyalty where offered, not our wider holiday services. Accounts and loyalty information are not shared across unrelated brands.
2. Information we use
We collect information you provide, including your name, email, mobile, address, orders, notes, loyalty activity and support messages. We also receive payment status from payment providers, delivery updates and technical information from your use of the service. Where birthday benefits are offered, date of birth is optional; gender is not collected.
We use the information needed for accounts, orders, payments, delivery, loyalty and support to fulfil our contract with you. Required fields are marked; without them we may be unable to provide the requested service.
We rely on our legitimate interests to protect the service against fraud and misuse and offer relevant birthday benefits and proportionate order-history offers. We keep legally required records to meet our legal obligations. Marketing messages use your consent, as explained below.
Order notes are stored for fulfilment, so include only relevant information. Contact the outlet before ordering about unclear allergen information. The service is aimed at adults but does not impose a minimum age.
3. Who we share it with
Information is available only as needed to authorised staff, food2go and providers of hosting, IT, security, payments, email, SMS, notifications, analytics, reporting and delivery. Some providers act under our instructions; others have their own privacy responsibilities.
Necessary delivery details go to the team delivering your order, including your name, contact details, delivery location and instructions.
Primary storage is in Microsoft Azure UK data centres. Supporting providers may process information overseas. Where UK transfer restrictions apply, we use adequacy arrangements or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum to EU standard clauses. Ask our privacy contact for the applicable arrangements or a copy of safeguards.
4. How long we keep it
We keep account, order and loyalty history while your account is active. After 24 months without a sign-in, order or loyalty activity, we delete the account and anonymise linked history. Deleting your account in My Account also anonymises linked history.
We keep support, payment, security and marketing-suppression records only as needed for enquiries or disputes, legal duties, preventing misuse and respecting your choices, then delete or anonymise them.
5. Cookies and marketing
First-party cookies and browser storage support ordering and remember choices. We do not use advertising, retargeting or cross-site tracking technologies. Where aggregate first-party statistics are enabled, they are for site improvement; you can object through Cookie settings or our privacy contact. Manage browser location and notification permissions in your device settings.
Marketing messages, including birthday and personalised offers, are off by default and need your active opt-in. Joining an account or loyalty scheme is not consent. Unsubscribe in the message or contact us to stop marketing and related profiling. Necessary order and service messages are separate.
6. Your rights
You can object to direct marketing at any time and to uses based on legitimate interests. Contact us using the privacy details above.
Where applicable, you can access, correct, delete or restrict your information, request a portable copy and withdraw consent without affecting earlier lawful use. We normally respond within one month, subject to legal timing rules, and explain any lawful limits.
Fraud flags can automatically block accounts. Request review at support@food2go.co.uk. Where a decision has legal or similarly significant effects, you can ask for information, make representations, request human intervention and contest it.
Send privacy complaints to our privacy contact. We acknowledge them within 30 days, investigate without undue delay and tell you the outcome. You can also complain to the ICO at ico.org.uk/make-a-complaint/. We explain material policy changes where required; continued use does not replace required consent.