Privacy Policy

Shaun the Sheep (شون ذا شيب / شان د شیپ) is a Persian kalle-pache restaurant operating in Dubai, United Arab Emirates, at 64 Jumeira Street, Jumeirah 1, Dubai. We operate the website shaunfood.com and are the controller responsible for your personal data. You can reach us by phone at 04 321 8882, 24 hours a day.

We collect only what we need to serve you:

• Order & reservation details — your name, phone number, email (optional), delivery address, the delivery map location or GPS coordinates (only if you choose to share them), items and quantities, order totals, any notes you add, and the requested time or party size.
• Payment information — handled by our payment provider; we do not receive or store your full card number (see “Payments”).
• WhatsApp orders — if you order through our WhatsApp link, your WhatsApp phone number and the messages you send us.
• Device & usage data — collected automatically, such as your IP address, browser and device type, the pages you view, referring links, and how you interact with the site.
• Cookies & browser storage — including your language preference, your basket (stored in your browser), and analytics/advertising identifiers (see “Cookies”).
• Push notifications — if you opt in, a browser subscription so we can send you order updates.

We use your data to:

• Prepare, deliver and fulfil your orders and reservations, and contact you about them.
• Take payment and send confirmations and receipts.
• Provide customer support and handle issues, cancellations and refunds.
• Operate, secure and improve our website and menu.
• Measure and improve our marketing and advertising (see “Analytics and advertising”).
• Keep accounting records, prevent fraud and misuse, and comply with UAE law.

We rely on the following legal bases: performing our contract with you (to take and fulfil orders), our legitimate interests (to run, secure and improve the business), your consent (for analytics/advertising cookies and push notifications), and compliance with legal obligations.

We use two kinds of cookies and browser storage:

• Essential — needed to make the site work, such as your chosen language, your basket, and your session. Blocking these may stop ordering from working.
• Analytics & advertising — set by Google Analytics, the Meta (Facebook) Pixel, the Snapchat Pixel and Microsoft Clarity to help us understand usage and measure our ads.
• Reviews — if you ask us to email your receipt, Trustpilot stores a small marker in your browser so you are not asked to review the same order twice.

You can control or delete cookies at any time through your browser settings.

To understand how the site is used and to run effective campaigns, we use:

• Google Analytics (GA4) — to measure website traffic and usage.
• Meta (Facebook) Pixel — to measure the performance of our ads on Facebook and Instagram and to show relevant ads, including remarketing to people who have visited our website.
• Snapchat Pixel and Snapchat Conversions API — to measure the performance of our ads on Snapchat and to show relevant ads, including to people who have visited our website. When an order is paid, our server also tells Snap that the purchase happened, with the order value and the dishes ordered, the Snapchat ad identifiers stored in your browser, and your phone number and email address (if you gave one) in hashed form — scrambled one way, so Snap can match the purchase to an ad without us ever sending it your phone number or email in readable form.
• Microsoft Clarity — to see how visitors use the site (for example, where people get stuck at checkout) through heatmaps and session recordings. Recordings are masked: what you type, such as your name, phone number and address, and the delivery map are hidden and never sent to Microsoft.

These tools may set cookies and collect device and usage data. You can opt out by adjusting your ad preferences in your Facebook/Instagram and Snapchat settings and Google Ad Settings, by using your browser’s cookie controls, or by installing Google’s Analytics opt-out browser add-on.

We share your data only with parties strictly needed to operate, and never sell or rent it:

• Our payment provider (Network International) — to process card payments securely.
• Our email provider (Google / Gmail) — to send you order confirmations and receipts.
• Our delivery riders — your address and phone, to bring your order.
• Google, Meta (Facebook / Instagram), Snap (Snapchat) and Microsoft (Clarity) — for the analytics and advertising described above.
• Trustpilot — only if you ask us to email your receipt: your email address and order number are sent to Trustpilot so that they can invite you to review us. Nothing is sent if you do not enter an email address.
• Our WhatsApp / messaging provider — for orders placed through WhatsApp.
• Our own point-of-sale and back-office systems — to record and prepare your order.
• UAE authorities — only where legally required.

Card payments are processed securely by our PCI-DSS-compliant payment provider (currently Network International). We do not receive or store your full card number, expiry date or security code.

Some of our providers (such as Google and Meta) may process data on servers located outside the United Arab Emirates. Where this happens, we rely on those providers’ own safeguards for international data transfers.

Order and reservation records are kept for up to 7 years to meet UAE bookkeeping requirements. Delivery coordinates and order notes are deleted together with the order record. Analytics data is retained according to the analytics provider’s settings. You can ask us to delete your data earlier at any time (see “Your rights”).

Sangak Club (bread plan). If you join our bread plan we keep what the plan needs to run: your name, phone number and optional email, the delivery address and map pin (or pickup), a gift recipient’s name and phone if you add one, your delivery schedule and breads, and the plan’s payments, balance and refunds. We use them only to bake, deliver and message you about your plan (by WhatsApp to the plan’s phone). Ninety days after a plan is cancelled we delete its address, map pin and phone numbers; payment and balance records stay with our order records for bookkeeping.

The website runs on HTTPS end-to-end. Customer data is kept in a private database that is not exposed to the public internet, backups are encrypted at rest, and access is limited to the restaurant’s owner and operators.

Our website and services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Under UAE Federal Decree-Law No. 45 of 2021 (the Personal Data Protection Law), you have the right to access your personal data, correct it, delete it, restrict or object to how we use it, and withdraw your consent (for example, to marketing) at any time. To exercise any of these rights, call us on 04 321 8882 — we answer 24 hours a day. We aim to respond within 30 days.

We may update this policy from time to time. The effective date at the top of this page always reflects the current version, and material changes will be shown here.

For any privacy question or request, contact Shaun the Sheep:

• Address: 64 Jumeira Street, Jumeirah 1, Dubai, United Arab Emirates
• Phone (24 hours a day): 04 321 8882