Skip to content
YepItsHalalBeta

Privacy

Searching for halal food should not cost you your privacy. This page says exactly what we collect, why, and how to get rid of it. It is short because we collect little.

You can use the whole site without telling us who you are

Search, the map, every restaurant page and the prayer spaces work signed out. When you search near yourself, your location is sent to our server to find what is nearby and is then thrown away. We do not store it, and we do not build a history of where you have searched. We only record a visit if you say yes.

What we collect

Only when you do something that needs it. Nothing in this list is collected just by visiting.

Your email address

If you sign in, ask to be told when we reach your area, send feedback and leave an address, ask for a language, submit a restaurant, or request a verification.

Kept while your account exists, or until you ask us to remove it.

What you write to us

Feedback, language requests, restaurant details you submit, and anything you send about your own restaurant. If we write back, we keep a copy of our reply with it.

Kept for two years, so we can see whether we fixed the thing you told us about.

Your name and a phone number or Instagram handle

Only if you claim a Founders Club spot for your restaurant, so Shabir can get in touch to set up your listing. Never published and never shared.

Kept while your listing or Founder status lasts, or until you ask us to remove it.

A one way hash of your IP address

To stop one connection flooding the forms. We hash it with a secret and never store the address itself, so it cannot be turned back into your IP.

Kept for 12 months alongside the submission it limited.

Payment details

Handled entirely by Stripe. We never see or store your card. We keep the Stripe customer and subscription identifiers so we know you are a supporter.

Kept while your support is active, then as long as tax rules require.

A deal code

Only if you tap "Get my code" on a restaurant deal. We keep the code, when you got it and used it, and anything you tell us if the restaurant did not give you the deal. We also keep a random number your phone holds in a cookie, so the code only works on your phone and a deal is used once a day. That number does not say who you are.

The link to your phone is removed after 400 days. Staff PIN tries are removed after 90 days.

If you run a restaurant deal

Your email, the deal you set up, when you agreed to the deal terms, and every credit, fee and top up. Card top ups are handled by Stripe. We never see your card.

Kept while your deal runs, then as long as tax rules require.

Photographs you upload

Only if you manage a restaurant listing and choose to add pictures of it.

Kept while the listing shows them.

If we ask your restaurant about photos

The business email or phone number your place put online, and where we found it. If you say yes, your name, your role, your email, any photos or videos you send, and the exact words you agreed to, with the date, as proof.

Kept while we use your photos, and the proof of your yes after that. If you say no or ask us to stop, we keep only your email or number on a list, so we never contact you again.

A recording of your visit

Only if you say yes when we ask. It shows where you clicked, tapped and scrolled, and what the pages looked like, so we can see what is hard to use. It never shows what you type, the place you search near, or pages with your own details.

Kept for 30 days, then deleted.

Why we are allowed to

  • Because you asked us to. Signing in, submitting a restaurant, asking for a language, asking to be told when we reach your area, saying yes to a recording. Consent, and you can withdraw it at any time.
  • Because we have a contract with you. Supporting us, buying a priority verification, getting a deal code, or running a deal for your restaurant.
  • Because we have a legitimate interest. Hashing an IP address, to stop the forms being flooded. Counting visits and button taps, so we know which pages are worth keeping. Seeing where people tap and how far they scroll, added up across everyone, so we know what to fix. Timing how fast pages load, so we can make slow ones faster. Hearing when a page breaks, so we can fix it. Asking a restaurant, at the business email or phone it put online, if we may show its photos. Each is the gentlest way we could think of to do it.

Cookies

We do not use advertising or tracking cookies. Our visitor analytics, from Vercel, does not use cookies and does not follow you between sites. If you sign in, Supabase sets a cookie that keeps you signed in, because you asked to be signed in.

If you tap “Get my code” on a restaurant deal, we set one more cookie. It holds a random number, so your code only works on your phone. The deal needs it to work. It does not follow you to other sites, and it goes after 400 days.

PostHog counts which pages and buttons get used, and sees where people tap and how far they scroll. It times how fast each page loads, and it tells us when a page breaks. For all of that it sets no cookies and stores nothing on your device. To tell one visit from another, it makes a code from your IP address and your browser. The code changes every day. Nobody can turn it back into your IP address or your browser, and PostHog does not keep your IP address. It never gets your exact location, your full postcode, or your email address.

The one thing we ask about is recording your visit, below. Whatever you answer, your browser remembers it, so we do not ask again.

Recordings

We ask before we record a visit. A recording shows where someone clicked, tapped and scrolled, and what the pages looked like. We watch them to find what is hard to use, so we can fix it.

  • What you type is hidden. So is anything on the page that shows where you are: the place you search near, how far things are from it, and the map.
  • Pages with your own details, like your account, show as an empty box.
  • If you say yes, PostHog keeps a small note in your browser, so the pages of your visit join up. It goes when you close the tab, or as soon as you say no.
  • PostHog keeps each recording for 30 days, then deletes it.
  • You can change your answer here at any time. Saying no stops the recording.

Who else sees it

We do not sell your data and we do not share it for advertising. These companies process it so the site can work:

  • Supabase Database, sign in, and photo storage.
  • Vercel Hosting, and privacy friendly visitor analytics.
  • PostHog Counting which pages and buttons get used, seeing where people tap and scroll, timing how fast pages load, and spotting pages that break. If you say yes, it also records your visit. Its servers are in the EU.
  • Stripe Payments, if you support us, buy a priority verification, or top up deal credit.
  • Resend Delivering what you send through a form on this site to our own inbox, so a person reads it, sending our reply back to you, and sending the emails that ask restaurants about their photos. It does not track whether you open it.

Some of them run servers outside the UK. Where that happens, the transfer relies on the safeguards in their agreements with us.

What you can ask for

  • Ask for a copy of everything we hold about you.
  • Ask us to correct anything that is wrong.
  • Ask us to delete it.
  • Ask us to stop using it for something.
  • Take your data elsewhere.
  • Complain to the Information Commissioner, without telling us first.

Email hello@yepitshalal.com and we will answer within a month. You do not have to give a reason. If you would rather complain to the regulator, the Information Commissioner is at ico.org.uk.

Restaurants are not covered by this page

Information about a restaurant as a business, its address, its menu, what it says about halal, is not personal data and this page does not govern it. If you run a place and think we have something wrong, tell us and we will fix it.

Last updated 3 October 2026. If we change how any of this works, we will change this page on the same day.