“Pasty Perks” Privacy Policy

1. Who We Are

• We operate food and drink businesses providing freshly prepared food for collection, delivery, and catering services.
• Our full business details, including trading names and contact information, are available on our website.
• For the purposes of data protection law, we are the Data Controller of your personal data.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

A) Information You Provide to Us

• Name
• Email address
• Phone number
• Billing and delivery address
• Order details and preferences
• Payment confirmation (we do not store full card details)
• Any messages or enquiries you send to us

B) Automatically Collected Information

• IP address
• Device and browser information
• Website usage data (via cookies or similar technologies)

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders
• Manage collections and deliveries
• Communicate with you about your order
• Handle refunds, complaints, or enquiries
• Improve our website, services, and customer experience
• Meet legal and regulatory obligations

4. Legal Bases for Processing

Under UK GDPR, we process your data on the following legal bases:

• Contract – to fulfil your order
• Legal obligation – for tax, accounting, and food safety records
• Legitimate interests – to operate and improve our business
• Consent – for marketing communications (where applicable)

5. Marketing Communications

• We will only send marketing emails or messages if you have opted in or where permitted by law.
• You can opt out of marketing communications at any time by using the unsubscribe link or contacting us directly.

6. Payments

• Payments are processed securely by third-party payment providers.
• We do not store or have access to your full payment card details.

7. Sharing Your Data

We may share your personal data with:

• Payment service providers
• Delivery partners or drivers
• Website hosting and ordering platform providers
• Professional advisers (accountants, legal advisers)
• Authorities where legally required

We only share data where necessary and ensure appropriate safeguards are in place.

8. Data Retention

• We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
• Order and transaction records are retained to comply with legal and accounting requirements.
• Marketing data is retained until you withdraw consent.

9. Your Data Protection Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, please contact us using the details on our website.

10. Cookies

• Our website uses cookies to improve functionality and user experience.
• You can manage or disable cookies through your browser settings.
• Further details are available in our Cookie Policy (if applicable).

11. Data Security

• We take appropriate technical and organisational measures to protect your personal data.
• Access to personal data is restricted to authorised personnel only.

12. Third-Party Links

• Our website may contain links to third-party websites.
• We are not responsible for the privacy practices of those websites.

13. Changes to This Policy

• We may update this Privacy Policy from time to time.
• The latest version will always be available on our website.

14. Contact & Complaints

• If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details provided on our website.
• You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.