Privacy Policy

1. Who we are

This website is operated by [Add your legal trading name], trading as Auntie's Kitchen ("we", "us", "our"), of Willows, Thames House, Bray, Maidenhead, SL6 2AH. We are the data controller for the personal data described in this policy. VAT: Not VAT registered. Company registration: Not applicable — sole trader.

2. Information we collect

When you place an order, we collect:

• Your name, email address, and phone number
• Your delivery or pickup address, if applicable
• Details of the order itself (items, quantities, price, chosen slot)

We do not ask for or store payment card details ourselves. When live payments are enabled, card details will be handled directly by a PCI-DSS compliant payment provider, not by us.

3. Why we process it, and our legal basis

• To fulfil your order (contact you, prepare food, arrange pickup or delivery) — necessary to perform our contract with you.
• To keep records for tax and accounting — necessary to comply with our legal obligations.
• To respond to enquiries or complaints — our legitimate interest in running the business properly.

4. Who we share it with

We use a small number of service providers (data processors) to run this website and take orders. We do not sell your data to anyone.

• Vercel Inc. — website hosting and our order database.
• Vercel Blob storage — hosting of menu photography.
• When live payments are enabled, a payment processor will handle card transactions directly and will become an additional processor named here.

5. How long we keep it

We keep order records, including your name and contact details, for as long as required by UK tax law (currently up to 6 years after the end of the relevant tax year), then delete them. If you contact us with an enquiry that doesn't lead to an order, we keep that correspondence for as long as needed to resolve it, and no longer than 24 months.

6. Cookies and similar technology

This site does not set tracking or advertising cookies. Full detail on what is stored in your browser, and why, is in our Cookie Policy.

7. Your rights

Under UK GDPR, you have the right to:

• Ask for a copy of the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data, where we're not required to keep it (e.g. for tax records)
• Object to or restrict certain processing
• Ask for your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us using the details below. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. Our ICO registration number is [Add your ICO registration number].

8. Contact us

Questions about this policy or your data: willowsbray@gmail.com · 07916 350766