Privacy Policy

Last updated 16 September 2026. This policy explains what personal data we collect through The Dose Kitchen mobile app and this website, why we collect it, who we share it with, and the choices you have.

1. Who we are

The Dose Kitchen is operated by THE SEVEN HOUSE FAMILY PROJECT MANAGEMENT L.L.C., Duja Tower, Office 9, Sheikh Zayed Road, Dubai, United Arab Emirates ("we", "us", "our"). We are the controller of the personal data described in this policy.

For any question about this policy, or to exercise any of the rights set out in section 8, contact us at hello@thedose.kitchen.

2. What this policy covers

This policy applies to The Dose Kitchen app on iOS and Android, and to this website. It does not cover our restaurants' in-person services, or any third-party site or app you reach through a link from ours.

3. What we collect

Information you give us

• Account details — your mobile number, email address, and first and last name. Your mobile number identifies your account.
• Delivery addresses — the address text and label you save, together with its precise map coordinates (latitude and longitude), so we can confirm you are inside a delivery zone and direct the courier.
• Allergen and dietary notes — free text you type against an order to tell the kitchen about allergies or dietary needs. Because this can reveal information about your health, we treat it as sensitive, use it only to prepare and deliver that order safely, and do not use it for marketing or profiling.
• Order content — the items, options and quantities you choose, whether you want collection or delivery, and any note you add.

Information created when you use the service

• Order history — past orders, prices, taxes and fees, order status and timestamps.
• Loyalty and referrals — points earned and redeemed, your referral code, and referrals made or accepted.
• Gift cards and meal plans — records of gift cards you buy or redeem and of any meal subscription, including its status and renewal date.
• Membership link — if you link a SEVEN membership to claim member pricing, we record that your account is linked and which membership type applies, so the correct discount is given.
• Sign-in codes — we send a one-time passcode to sign you in. We store it only as an irreversible hash with a short expiry, never as readable text.
• Push notification token — a device identifier that lets us send you order updates. You can switch notifications off in your device settings at any time.
• Technical logs — standard server records such as IP address, device and app version, and error reports, kept for security and troubleshooting.

Payment information

Card details are entered on the secure page of our payment provider and are never received, processed or stored on our systems. We keep only a payment reference, the amount, and whether the payment succeeded.

4. Why we use it, and on what basis

• To perform our contract with you — creating and securing your account, taking and preparing your order, taking payment, delivering, handling refunds, and running loyalty, gift card and subscription features.
• Because you have consented — sending marketing messages, and any use of your allergen or dietary notes. You can withdraw consent at any time; withdrawing it does not affect anything done beforehand.
• For our legitimate interests — keeping the service secure, preventing fraud and abuse, and understanding in aggregate how the app is used so we can improve it.
• To comply with the law — keeping tax and accounting records, and responding to lawful requests from authorities.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects for you.

5. Who we share it with

We share only what each recipient needs to do its job for us, under contract:

• Network International — card payment processing.
• Stripe — payment processing for gift cards and meal subscriptions.
• Foodics — our point-of-sale and kitchen system, which receives your order and the name and contact number needed to prepare and hand it over.
• Zoho — our customer records system and the service that sends transactional email, including your sign-in codes.
• Google Firebase — delivery of push notifications.
• Delivery partners — for delivery orders, the courier receives your name, contact number and delivery address.
• Other SEVEN House brands — where you have chosen to link a SEVEN membership, to confirm it is valid and apply member pricing.
• Professional advisers and authorities — where we are required by law, or need to establish or defend legal claims.

6. Where your data is held

Our systems are hosted in the United Arab Emirates and the European Union, and some of the providers above process data outside the UAE. Where data leaves the UAE we rely on the safeguards permitted under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, including contractual protections with each provider.

7. How long we keep it

• Account details — for as long as your account is open, and up to 12 months afterwards.
• Order, payment and tax records — five years from the end of the relevant tax period, as UAE tax law requires. These are kept even after an account is closed.
• Allergen and dietary notes — kept with the order they belong to.
• Sign-in codes — minutes; they expire and are then unusable.
• Technical logs — up to 12 months.

8. Your rights

You may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. You may also withdraw consent, and complain to the UAE Data Office.

Email hello@thedose.kitchen from the address on your account, or include your registered mobile number so we can identify you. We respond within 30 days.

9. Deleting your account

To close your account and delete your data, email hello@thedose.kitchen with the subject "Delete my account", from your registered email address or quoting your registered mobile number.

We delete your profile, saved addresses, allergen notes, loyalty balance and push token. Order, payment and tax records are retained for the five-year period described in section 7, and any unspent gift card balance and loyalty points are forfeited.

10. Security

Traffic between the app and our servers is encrypted in transit. Sign-in codes are stored only as hashes, card data never reaches us, and access to customer records is limited to staff who need it. No system can be guaranteed completely secure, but we will notify you and the relevant authority of a breach where the law requires it.

11. Children

The Dose Kitchen app is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

12. Our website

Our website is built and hosted by Webflow, whose servers are in the United States. Reading the site does not create an account, and we do not use advertising or analytics trackers on it.

Cookies and browser storage

Our host sets one cookie that is needed to serve the pages and keep the site secure. We set no advertising or analytics cookies, so the site does not ask you to accept any. Our menu pages keep a copy of the menu, and the kitchen you last looked at, in your own browser's storage so the pages open quickly; that stays on your device and never reaches us.

Enquiry forms

When you send a franchise enquiry we receive what you type: your name, email address, telephone number, company and position, the city and country you are asking about, and your answer about available funding. We use it to answer you and to keep a record of the enquiry in our customer records system, and we ask you to tick a box to confirm that before you send it. Enquiries are stored by Webflow in the United States and in Zoho, and we keep them for two years after our last contact with you unless they become part of a signed agreement. We do not use them for marketing. Write to hello@thedose.kitchen to see or delete your enquiry.

Maps, fonts and video

The locations page shows a map whose tiles come from OpenStreetMap, so loading them tells OpenStreetMap your IP address. Choosing "Get directions" takes you to Google Maps, which is outside this policy. Typefaces and videos are served from our own site, not from a font or video service.

13. Changes to this policy

If we change this policy we will update the date at the top of this page, and tell you in the app before any significant change takes effect.