1. Who We Are
Toppings Takeaway ("we", "our", "us") is a halal takeaway based at 414-416 Blackburn Road, Accrington, BB5 0DE. We are the data controller for the personal data described in this policy. This means we decide how and why your personal data is used.
Contact for privacy matters:
Phone: 01254 233054
Post: Toppings Takeaway, 414-416 Blackburn Road, Accrington, BB5 0DE
We do not have a Data Protection Officer because we are not required to appoint one under UK GDPR. Privacy questions go to the contact details above.
2. The Data We Collect
We collect the following personal data when you place an order or contact us:
| Data type | What we collect | How we collect it |
|---|
| Identity and contact data | Your name, phone number and email address | When you place an order online or by phone |
| Order data | Your order details, delivery address and collection details | When you place an order |
| Payment data | Payment method and transaction ID. We never store full card details | At checkout via our payment provider |
| Communication data | Emails, messages or phone notes relating to your order or enquiry | When you contact us |
| Marketing preferences | Whether you have opted in to receive marketing messages | When you place an order or sign up |
We do not knowingly collect data from children under 13. If you are under 18, please ask a parent or guardian before placing an order or signing up for marketing.
3. Why We Use Your Data (Lawful Basis)
Under the UK GDPR, we must have a lawful basis for using your personal data. The table below explains what we use your data for and which lawful basis applies.
| Purpose | Lawful basis |
|---|
| To process and deliver your order | Contract (Article 6(1)(b)) |
| To take payment and keep financial records | Legal obligation (Article 6(1)(c)) |
| To send you marketing messages about offers, new menu items and promotions | Legitimate interests (Article 6(1)(f)) or Consent (Article 6(1)(a)) |
| To respond to your enquiries | Legitimate interests (Article 6(1)(f)) |
| To improve our service and website | Legitimate interests (Article 6(1)(f)) |
When we send marketing by email or text message, we rely on one of two bases:
Soft opt-in (legitimate interests). If you have previously ordered from us, we may send you marketing about similar products and offers. You can opt out at any time. This is allowed under the Privacy and Electronic Communications Regulations 2003 (PECR) because you are an existing customer.
Consent. If you are not an existing customer, or if you have opted out of the soft opt-in, we will ask for your clear consent before sending marketing. You can withdraw consent at any time.
When we make live marketing phone calls, we check that your number is not registered on the Telephone Preference Service (TPS). If it is, we will only call if you have specifically told us you do not object.
We have carried out a Legitimate Interests Assessment (LIA) for our marketing activities. You can request a summary of this assessment by contacting us.
4. Marketing
We use your name, phone number and email address to send you:
- Offers and promotions
- New menu items
- Seasonal deals
- Updates about Toppings Takeaway
We will only send marketing by email or text message if:
- You are an existing customer and we are marketing similar products (soft opt-in), or
- You have given us your clear consent
Every marketing message includes an unsubscribe link or opt-out instructions. You can also opt out at any time by calling us on 01254 233054 or by telling us in person.
We do not sell, rent or share your personal data with third parties for their own marketing. We only share your data with the service providers listed in Section 6, and only for the purposes described in this policy.
5. How Long We Keep Your Data
We keep your personal data only as long as necessary for the purposes described in this policy.
| Data type | Retention period | Reason |
|---|
| Order and payment records | 6 years | UK tax law (HMRC requirement) |
| Contact and enquiry records | 2 years | To handle follow-up questions or disputes |
| Marketing data | Until you unsubscribe, or 3 years after your last order if you have not engaged with any marketing | To keep our marketing list accurate and relevant |
| Website analytics data | 26 months | Standard analytics retention |
After these periods, we delete or anonymise your data securely.
6. Who We Share Your Data With
We do not sell your personal data. We share it only with the following categories of service providers, who process it on our behalf:
| Recipient | Purpose |
|---|
| Payment processors | To take payment securely. We never store full card details. |
| Website hosting provider | To run our website and process online orders. |
| Email or SMS marketing platform | To deliver marketing messages you have opted in to. |
| Analytics providers (e.g. Google Analytics) | To understand how visitors use our website. Data is aggregated and anonymised where possible. |
| Delivery partners | If we use a third-party courier, we share your name, address and order details to complete the delivery. |
All service providers are required to keep your data secure and to use it only for the purposes we specify.
We do not share your data with third parties for their own marketing purposes.
7. International Transfers
Some of our service providers (such as Google Analytics) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as:
- UK adequacy regulations, or
- Standard Contractual Clauses plus the UK International Data Transfer Addendum
You can request a copy of the safeguards we use by contacting us.
8. Your Rights Under UK GDPR
| Right | What it means |
|---|
| Right to be informed | You have the right to know how we use your data. This policy explains that. |
| Right of access | You can ask for a copy of the personal data we hold about you. |
| Right to rectification | You can ask us to correct inaccurate or incomplete data. |
| Right to erasure | You can ask us to delete your data in certain circumstances. |
| Right to restrict processing | You can ask us to limit how we use your data. |
| Right to data portability | You can ask us to transfer your data to another organisation in certain circumstances. |
| Right to object | You can object to processing based on legitimate interests, including direct marketing. |
| Rights related to automated decision-making | We do not use automated decision-making or profiling. |
To exercise any of these rights, contact us on 01254 233054 or in person at 414-416 Blackburn Road, Accrington, BB5 0DE. We will respond within one month. We may ask for proof of identity before acting on your request.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
9. Cookies and Website Analytics
Our website uses cookies and similar technologies to:
- Keep your cart and order session working (essential cookies)
- Understand how visitors use our site (analytics cookies)
You can control non-essential cookies through your browser settings. We do not use cookies to track you across other websites for advertising purposes.
For more information, see our Cookie Policy.
10. Security
We take reasonable steps to keep your data safe:
- Our website uses HTTPS/TLS encryption
- Payment data is processed by PCI-DSS compliant providers
- Access to your data is limited to staff who need it to do their jobs
- We use secure systems for storing and processing data
No system is completely secure. If a data breach occurs that affects your rights, we will notify you and the ICO as required by law.
11. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on our website. If we make significant changes, we will notify you by email or by a notice on our website.
12. How to Contact Us
Toppings Takeaway
414-416 Blackburn Road
Accrington
BB5 0DE
Phone: 01254 233054
