What privacy rules apply when I collect customers' phone numbers and addresses for delivery?
By the Menuthere editorial team · Last updated
The rules depend on your country. In the EU you need a legal basis such as consent or a contract. India's DPDP Rules ask for a plain consent notice stating the purpose. The UAE law bans processing without consent except in listed cases.
- EU: processing needs a legal basis, and consent must be freely given, informed, specific and unambiguous.
- India: the DPDP Rules need a standalone, plain consent notice that states the purpose.
- UAE: Federal Decree-Law No. 45 of 2021 has applied since 2 January 2022.
- Everywhere: collect only what delivery needs, and answer access or erasure requests.
Collect only what an order needs
Menuthere stores come with their own privacy policy page, and the customer types their own address at checkout, so you collect only what the order needs.
Next questions
Sources (3)
- EDPB: data protection basics for SMEs, European Data Protection Board, read 30 Sep 2026
- PIB: DPDP Rules 2025, PIB (Ministry of Electronics & IT), 14 Nov 2025
- UAE data protection laws, UAE Government portal (u.ae), updated 4 Dec 2025