Privacy & Cookie Policy

1.Data Controller & Contact Details

The legal entity responsible for the collection and processing of your personal data as Data Controller is:

2. Categories of Data We Collect

We only collect personal information that is necessary to fulfill your catering inquiries, process event bookings, and maintain site security:

• Contact Information: Full name, telephone number, email address, and physical event location.
• Event Details: Event date, expected guest count, menu preferences, and dietary requirements.
• Financial Data: Advance deposit payment processing is handled exclusively via Stripe (PCI-DSS Level 1 compliant). We do not store raw credit/debit card details on our servers.
• Technical Data: IP address, device type, browser information, and reCAPTCHA security assessment metrics.

3. Lawful Bases for Processing (UK GDPR Article 6)

We process your personal data under the following lawful bases:

• Contractual Necessity (Art. 6(1)(b)): To quote, process, and execute catering orders and event bookings.
• Consent (Art. 6(1)(a)): For non-essential web analytics cookies activated upon explicit user confirmation via our cookie banner.
• Legitimate Interests (Art. 6(1)(f)): For maintaining website integrity, preventing automated spam via Google reCAPTCHA v3, and improving service delivery.
• Legal Obligation (Art. 6(1)(c)): For compliance with UK tax, accounting, and food hygiene record-keeping regulations.

4.Cookies & Tracking Technologies

Our site utilizes necessary and analytical cookies to ensure optimal functionality:

5.Data Sharing & Processors

We do not sell, rent, or lease your personal data. We disclose data solely to trusted third-party service providers bound by data processing agreements:

• Stripe Payments UK: For secure deposit processing and card tokenization.
• Google LLC: For analytics (with consent) and reCAPTCHA security.
• Cloud & Infrastructure Providers: AWS / Vercel for hosting under encrypted protocols.

6.Data Retention & Security

Inquiry data is retained for up to 12 months. Booking contract and financial records are retained for 6 years in compliance with UK tax law. All digital transmissions are secured via TLS/SSL encryption protocols.