privacy policy
Privacy Policy
Last updated: 10 March 2026
​
This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, place an order online, or interact with our café or mobile catering van.
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
We are a café business based in Wales that also operates a mobile catering van and accepts orders online.
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
📧 Email: halenapupur@outlook.com
2. Information We Collect
When you interact with our café or place an order online, we may collect the following information:
Information you provide
-
Name
-
Email address
-
Phone number
-
Delivery or collection details
-
Order details
-
Any notes you include with your order (for example dietary requirements)
Payment information
Payments are processed through third-party payment providers. We do not store full payment card details.
Website and device information
When you visit our website we may automatically collect:
-
IP address
-
Browser type
-
Device type
-
Pages visited
-
Date and time of visits
This helps us improve our website and ordering service.
3. How We Use Your Information
We use your personal data to:
✔ Process and fulfil your food and drink orders
✔ Provide customer support
✔ Manage collections or deliveries
✔ Communicate with you about your order
✔ Improve our website and services
✔ Comply with legal obligations
We will only use your personal data where we have a lawful basis to do so under UK data protection law.
4. Lawful Bases for Processing
We rely on the following lawful bases:
Contract
To process and complete your order.
Legitimate interests
To operate and improve our café, website, and mobile catering services.
Legal obligations
To comply with tax, accounting, or legal requirements.
5. Sharing Your Information
We may share your information with trusted third parties where necessary, such as:
-
Online ordering platform providers
-
Payment processors
-
Website hosting providers
-
Delivery service providers (if applicable)
These providers only process your data on our instructions and must keep it secure.
We do not sell your personal information.
6. Data Retention
We only keep personal data for as long as necessary.
For example:
-
Order records may be kept for accounting and tax purposes
-
Customer communications may be retained to resolve queries
When the information is no longer required, it will be securely deleted.
7. Your Data Protection Rights
Under UK GDPR, you have the right to:
-
Request access to the personal data we hold about you
-
Request correction of inaccurate data
-
Request deletion of your personal data
-
Object to certain types of processing
-
Request restriction of processing
-
Request data portability where applicable
To exercise any of these rights, please contact us at:
8. Cookies
Our website may use cookies or similar technologies to:
-
Enable website functionality
-
Improve user experience
-
Analyse website traffic
You can manage cookies through your browser settings.
9. Data Security
We take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on our website with a revised date.
11. Complaints
If you have concerns about how we handle your personal data, please contact us first.
You also have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
https://ico.org.uk
​