What we keep.

What we hold when you order, why, for how long, and how to ask us about it. Written plainly, because nobody should need a lawyer to buy a bun.

Last updated · 27 October 2026

Who we are

Shukr Bake House L.L.C, trading as Shukr, part of Atelier House Hospitality. The kitchen is at Behind Villa 11, 75B Street, Jumeirah 1, Dubai, United Arab Emirates. We decide how the personal data described here is used, which makes us the controller under the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021.

Write to info@shukr.me, or message us on WhatsApp at +971 58 114 4573.

What we collect

When you post an order: your name, the delivery address with its villa, flat or office number, a map pin if you set one, any note for the porter, and, for a gift, the recipient’s name and number. At the counter, Stripe collects your email address, your phone number and your card. Card details never reach us. Stripe holds them, and we see only that the payment succeeded.

When you message us: whatever you write on WhatsApp, and the number you write from. WhatsApp is run by Meta under Meta’s own terms.

When you browse: ordinary visit counts. We use Google Analytics and Vercel Analytics to see how many people read which pages. We also use the Meta Pixel, run by Meta under Meta’s own terms, so our Instagram and Facebook ads can count which visits led to an order and show our posts to people likely to want them. It records the pages you visit, what you add to your docket, and the value of an order you pay for, never your card. These tools set identifiers in cookies or similar storage. You can limit ad tracking in your browser and in your Meta ad settings.

On your own device: the address field remembers your name, address and pin in your browser’s storage, so a regular never retypes them. That copy stays on your device and reaches us only inside an order you post. Clearing your browser data removes it.

Your order history: how many times you have ordered, when you first did, and what you had last time, so the kitchen can recognise regulars. It is kept against a scrambled code made from your phone number or email, not the number or address itself.

Checkout tries: opening checkout sets buns aside, so for each device, and the internet connection it uses, we note the checkouts it opens in a day. Paid ones do not count. The device is known by a small cookie that lasts only that day. The connection is known by a scrambled code made from its IP address, a new code each day, never the IP address itself. The day’s notes are deleted the next day.

Address suggestions: what you type into the address field is sent to Google Places to finish it, under Google’s privacy policy.

Why we use it

To bake and deliver what you ordered, to message you about it, to take payment and keep the accounts, to answer your questions, to understand how the site is used, and to meet the law.

Our grounds are the contract you make when you order, our legitimate interest in running a small bakery well, the legal duty to keep financial records, and your consent where the law asks for it, which you may withdraw at any time.

Who sees it

The kitchen and the porter see what it takes to get a parcel to you: name, address, pin, note and number. Nothing more.

Stripe processes the payment. Google finishes addresses and counts visits. Vercel hosts the site and counts visits. Meta carries WhatsApp messages. Each works under its own privacy policy. Orders placed through Deliveroo or Noon Food are handled by those apps under their terms, and we receive from them only what is needed to fill the order.

We do not sell personal data, and we do not share it for advertising.

How long

Order and payment records stay for five years, as UAE tax and commercial law requires. WhatsApp messages stay as long as we need them to answer you. Visit counts are kept in aggregate. Notes of checkout tries are deleted the next day.

The copy of your address on your own device stays until you clear it.

Your rights

You can ask what we hold about you, have it corrected or deleted, or ask us to stop using it. Write to info@shukr.me and we answer within a month.

Children

The site is for adults ordering food. We do not knowingly collect personal data from anyone under 18.

Changes

When the way we handle data changes, this page changes with it, and the date at the top moves. The terms that go with it are on the terms page.