Last updated: [DATE]
This notice explains what personal information we collect when you use this site, why, and your rights. The data controller is Curry N' Carbs, the trading name of Jamaal [SURNAME], 4a Pilkington Building, Roman Road, Middlesbrough TS5 6DY. Contact: [EMAIL] or 01642 957386.
| Information | Why we use it | Legal basis |
|---|---|---|
| Your name and mobile number | To manage your order, identify you at collection, and send order texts (confirmation, reminders, ready alerts) | Performance of a contract |
| Your order details and any notes you add (including allergy notes) | To prepare your food correctly and safely | Performance of a contract; for allergy notes, protecting vital interests and food safety law |
| Payment | Deposits are processed by Stripe. We never see or store your card details; we receive only confirmation that payment succeeded | Performance of a contract |
| Basic security logs | Like almost every website, our hosting provider (Cloudflare) keeps basic technical logs to protect the site from attacks and keep it working. We never look at these ourselves | Legitimate interests |
Only the services needed to run ordering: Stripe (payment processing), Cloudflare (website hosting), and [SMS PROVIDER, e.g. Twilio] (order texts). Each acts under their own strict data obligations.
Order records including your name and number are kept for [SUGGEST: 24 months] and then deleted. Records we must keep for tax and accounting purposes are kept for 6 years as required by law, without more than is needed.
You have the right to ask for a copy of your information, to have it corrected or deleted, to object to or restrict how we use it, and to data portability. Contact us at [EMAIL] and we will respond within one month. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk.