Cookie Policy
Legend Kebab & Grill ("we", "us", "our")
Website: thelegendkebab-grill.co.uk
Last updated: 04 August 2026
This site runs on the BiteLink platform. Cookies described in this policy that relate to core site functionality, payments, and analytics are the same across all BiteLink-powered sites and are set by BiteLink Ltd's software on Legend Kebab & Grill's behalf.
1. What this policy covers
This Cookie Policy explains how Legend Kebab & Grill uses cookies and similar technologies when you visit or order food through thelegendkebab-grill.co.uk. It should be read alongside our Privacy Policy.
2. What are cookies?
Cookies are small text files placed on your device when you visit a website. They let a site remember things about your visit — like what's in your basket, whether you're logged in, or how you interact with the pages — so it can work properly and be improved over time.
3. The law that applies
We comply with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, both enforced by the Information Commissioner's Office (ICO). Under PECR, we need your consent before setting any cookie that isn't strictly necessary for the service you've asked for, or otherwise exempt. A small number of low-risk cookies — for example those needed purely for security, fraud prevention, remembering your order, or remembering how the site is displayed to you — don't require consent, but we still tell you about them below.
4. Cookies we use
4.1 Strictly necessary cookies (always on)
These cookies are essential for the site to work — placing orders, staying logged in, and keeping payments secure. You can block them in your browser, but parts of the site (including checkout) won't work properly if you do.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
session | Legend Kebab & Grill (first party, set by BiteLink's platform) | Signs you in and keeps you authenticated — stores your login token, account type (guest or registered), and which store you're browsing | 6 months |
restaurant-order-store-v4 | Legend Kebab & Grill (first party, set by BiteLink's platform) | Remembers your order details as you go through checkout — name, email, order history, timezone | 6 months |
metadata | Legend Kebab & Grill (first party, set by BiteLink's platform) | Technical cookie storing the base URL used to load menu/product images correctly | 6 months |
__stripe_mid | Stripe | Fraud prevention — identifies your device to Stripe Radar so it can assess payment risk | Up to 1 year |
__stripe_sid | Stripe | Fraud prevention — identifies your checkout session while a payment is in progress | 30 minutes |
restaurant-order-store-v4 holds personal data (your name and email) as part of
completing your order — see our Privacy Policy for how
that's retained and protected.
Stripe may set additional cookies depending on which features we use (for example, saved payment methods via Stripe Link). Full details are in Stripe's Cookie Policy.
Payments on this site are processed through Legend Kebab & Grill's own Stripe account. Both Legend Kebab & Grill and BiteLink Ltd (the platform provider) can see order and payment details through Stripe — Legend Kebab & Grill as the merchant taking the payment, and BiteLink as the platform connecting this site to Stripe. Full detail is in our Privacy Policy.
4.2 Analytics / performance cookies (require your consent)
BiteLink Ltd, the technology provider behind this site, uses LogRocket and PostHog to see how visitors use sites on the BiteLink platform — for example, where people get stuck ordering, whether a page is loading slowly, or what caused an error — so BiteLink can fix problems and improve the platform. Both tools can record session activity such as clicks, scrolling, and page navigation; PostHog is also used for application logs and error tracking. Only BiteLink has access to this data — Legend Kebab & Grill does not see it. Neither tool is used to record payment card details — card entry happens inside Stripe's own secure, isolated payment form, which they cannot see into.
These cookies are only set if you accept them in our cookie banner.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_lr_tabs_ | LogRocket | Session tracking — links your activity together and prevents duplicate recordings across browser tabs | Session |
_lr_hb_ | LogRocket | Cross-tab "heartbeat" check to coordinate session recording | Session |
ph_*_posthog | PostHog | Identifies your session for analytics, error tracking, and session replay | Logs: 14 days. Session replay: 30 days |
Further detail is in LogRocket's Cookie documentation and PostHog's documentation on data collection. PostHog processes this data on its EU Cloud (Frankfurt), so it stays within the EU.
4.3 Marketing cookies (require your consent)
Not currently used. If we introduce advertising or remarketing tools in future, this section will be updated before they go live, and they'll be gated behind your consent like our other optional cookies.
4.4 Technologies that aren't cookies
Not everything on our site that talks to a third party sets a cookie. Our address lookup field is powered by Ideal Postcodes, which sends your search input to their API as you type to suggest matching addresses. It doesn't set any cookie or use local/session storage, so it isn't listed above — but it does involve your address input being shared with that provider. That sharing is covered in our Privacy Policy, not this Cookie Policy, since PECR's cookie rules only apply to information stored on or read from your device.
5. How we ask for your consent
When you first visit, we show a cookie banner where you can:
- Accept all — turns on analytics and any optional cookies
- Reject non-essential — only strictly necessary cookies are set
- Manage preferences — choose which categories to allow individually
"Accept" and "Reject" are given equal visual weight, no boxes are pre-ticked for non-essential categories, and you can change your mind at any time via the Cookie Preferences link in our site footer.
6. Managing cookies through your browser
You can also block or delete cookies using your browser settings. Doing so may stop parts of the site — including checkout — from working. Guidance for common browsers:
7. Third-party privacy policies
Stripe, LogRocket, PostHog, and Ideal Postcodes process some data as independent controllers/processors. See their own policies for how they handle it:
- Stripe Privacy Policy
- LogRocket Privacy Policy
- PostHog Privacy Policy
- Ideal Postcodes Privacy Policy
8. Changes to this policy
We may update this policy from time to time, for example when we add or remove a tool that sets cookies. Changes will be posted here with an updated "Last updated" date.
9. Contact us
Questions about this policy or how we use cookies: [email protected].
This website is built and hosted using the BiteLink platform, provided by BiteLink Ltd. See BiteLink's Privacy Policy for how BiteLink itself handles data across the platform.