Last updated: 16 October 2026

S&H Restaurant and Catering ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you visit our website, place an order or contact us, how we use it, and the choices you have. We handle personal data in line with the data protection laws of Brunei Darussalam, including the Personal Data Protection Order 2025.

1. Information We Collect

  • Account and contact details — your name, phone number, email address and password (stored encrypted) when you create an account or place an order.
  • Order details — delivery address, items ordered, special instructions, order history and the branch you ordered from.
  • Payment information — card payments are processed securely by our payment provider (Stripe). We do not see or store your full card number.
  • Reviews and messages — ratings, reviews, enquiries and newsletter subscriptions you submit.
  • Device and usage data — IP address, browser type, pages visited and similar data collected through cookies and analytics tools. See our Cookie Policy.

2. How We Use Your Information

  • To prepare, deliver and track your orders, and to contact you about them by SMS, email, phone or push notification.
  • To manage your account, loyalty and order history.
  • To process payments, refunds and prevent fraud.
  • To respond to enquiries, complaints and reviews.
  • To send offers and newsletters — only where you have agreed. You can unsubscribe at any time.
  • To improve our menu, website and service, and to meet our legal and accounting obligations.

3. Sharing Your Information

We do not sell or rent your personal data. We only share it with:

  • Our staff and branches who need it to fulfil your order.
  • Delivery riders, who receive only your name, phone number and delivery address.
  • Service providers acting on our behalf — payment processing, SMS and email delivery, push notifications, hosting and analytics — who must keep it confidential.
  • Government or law enforcement authorities where required by law.

4. Data Retention

We keep your personal data only for as long as needed for the purposes above, or as required by law (for example, financial records). When it is no longer needed we delete or anonymise it.

5. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted staff access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

6. Your Rights

You may ask to access, correct or delete the personal data we hold about you, or withdraw consent to marketing at any time. You can update most details from your account page, or contact us using the details below. We will respond within a reasonable time.

7. Children

Our online ordering service is not intended for children under 18. We do not knowingly collect personal data from children without parental consent.

8. Changes to This Policy

We may update this policy from time to time. The latest version will always be on this page with the date it was last updated.

9. Contact Us

For any privacy questions or requests, please contact:

  • Email: contact@royaldelicieux.com.bn
  • Phone: +673 223 4567
  • Address: Unit 5, Ground Floor, Kiulap Plaza, Jalan Kiulap, Bandar Seri Begawan BE1518, Brunei