Resbos — Dubai

Privacy policy

Effective 9 October 2026

This policy explains what personal information Resbos — Dubai ("we", "us") collects, why, who we share it with and how long we keep it. It covers our restaurant staff app (waiter, kitchen, cashier and back-office), our online ordering page, our receipts and feedback page, and orders that reach us through delivery platforms.

1. Who is responsible

Resbos — Dubai is responsible for the personal information described here. Contact details are at the end of this policy.

2. What we collect

When you order online

• Your name, phone number and delivery address, and the map location you pin for delivery.
• What you ordered, the time you asked for, and the tracking code for your order.

When you order through a delivery platform

• The name, phone number and delivery address the platform (for example Zomato or Swiggy) passes to us with your order. The platform's own privacy policy covers what you give them.

When you eat in, collect or have an account with us

• Your order, the bill, how you paid (cash, card, wallet and so on) and the invoice we issue.
• If you have a customer account: your name, phone, email, address, business name and tax registration number where relevant, credit limit and terms, and loyalty points.
• If you book a table: your name, phone number, party size, time and any note.
• If you rate your visit from the link on your receipt: your rating and comment, linked to that receipt.

We never store card numbers. Card payments are taken on a separate card terminal; we keep only the payment method, the amount and the terminal's reference.

Our staff

• Name, work email, role and a password, which is stored only in a one-way scrambled (hashed) form.
• The name of each device signed in to the staff app and when it was last used, so access can be withdrawn from a lost phone.
• Work recorded against the account: orders taken, dishes prepared, payments, discounts, refunds, approvals and stock write-offs.

Technical information

• Our web pages use a session cookie that keeps a sign-in or an order form working; it expires after two hours of inactivity. We do not use advertising or tracking cookies.
• Our servers keep technical logs (such as IP address, time and the page requested) to keep the service secure and to fix faults.
• If crash reporting is switched on in the staff app, a crash sends technical details (device model, operating-system version and the error) to our crash-reporting provider. It does not include customer details.

3. The staff app on your device

• The app needs an internet connection to reach our server.
• It uses the camera only when a staff member chooses to scan a barcode or take a product photo. Scans are not stored; product photos are stored as part of the product.
• It does not read your contacts, messages, call log or location.
• It keeps its sign-in token in the device's secure storage and an unsent order on the device until it is delivered, so an order is not lost if the connection drops.

4. Why we use it

• To take, prepare and deliver your order, and to tell you its status.
• To bill you and keep tax records that UAE VAT law requires.
• To run customer accounts: credit, payments received and loyalty points.
• To manage table bookings.
• To improve our food and service from the feedback you choose to give.
• To run the restaurant safely: staff access, accountability for money and stock, and security of our systems.

We use your information because we need it to serve you, because the law requires it (tax records), or because we have a legitimate interest in running our business securely. We do not use it for advertising and we do not sell it.

5. Who we share it with

• Our delivery riders: the name, phone number and address needed to deliver your order.
• Delivery platforms: when your order came through one, the platform already holds your details under its own policy; we send it nothing more about you.
• Our hosting provider, which stores our system on its servers on our behalf and may not use the information for anything else.
• Authorities, such as the UAE Federal Tax Authority, when the law requires it.

We share nothing else, and we never sell personal information.

6. How long we keep it

• Orders, invoices and payments: for as long as UAE tax law requires (at least five years), then deleted or anonymised.
• Customer accounts: while the account is in use; the account's invoices follow the rule above.
• Bookings and feedback: kept with the related visit or order.
• Staff accounts: while the person works with us. When an account is deactivated it can no longer sign in; the work recorded against it is kept with the business records.
• Staff app sign-ins: until the person signs out or an administrator signs the device out.

7. How we protect it

• Information travels over encrypted connections (HTTPS).
• Passwords are stored only in hashed form.
• Each member of staff sees only what their role needs; for example, waiters and kitchen staff cannot open bills, takings or reports, and only managers see costs and margins.
• An administrator can sign any person out of every device at once and deactivate accounts immediately.

8. Your choices and rights

You can ask us to tell you what personal information we hold about you, to correct it, or to delete it. We will delete what we are not required by law to keep; invoices and tax records stay for the period the law sets. You can also object to how we use your information. We do not send marketing messages. These rights apply under the laws of the United Arab Emirates, including the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Contact us using the details below; we aim to reply within 30 days.

9. Children

Our services are not directed at children under 18, and we do not knowingly collect their personal information. The staff app is for our employees only.

10. Changes to this policy

If we change this policy, we will publish the new version on this page with a new effective date.

11. Contact us