Privacy Policy

Last updated: 1 April 2026

Who we are

This website is operated by Praf's Kitchen ('we', 'us'). We provide online ordering, delivery/collection slot booking, and customer support.

Data controller

For the purposes of UK GDPR and the Data Protection Act 2018, Praf's Kitchen is the data controller for personal data processed via this website.

What information we collect

Contact details such as your name, telephone number and (if provided) email address.
Delivery details such as your address and postcode.
Order information such as items purchased, delivery/collection timeslot, and order history.
Account information if you register (e.g. saved addresses).
Messages you send us through our contact form or support channels.
Technical data such as IP address, device/browser information and basic usage logs (for security and troubleshooting).
Location data only if you explicitly grant permission in your browser (used for delivery/collection related features).

How we use your information

To process and fulfil your orders (including delivery/collection).
To contact you about your order (e.g. confirmations, issues, delivery updates).
To provide customer service and handle complaints or queries.
To maintain website security, prevent fraud and troubleshoot problems.
To improve our services and website performance.

Lawful bases for processing

We process personal data under the following lawful bases (as applicable):

Contract (to take and fulfil your order).
Legal obligation (e.g. record keeping where required).
Legitimate interests (e.g. keeping our site secure, preventing abuse, improving services).
Consent (e.g. optional location access or optional marketing where offered).

Sharing your information

We share your information only where necessary, for example:

With delivery staff to fulfil your delivery.
With service providers who help us run this website (hosting, security, analytics) under appropriate safeguards.
With payment providers when you pay online (they handle your card details; we do not store full card numbers).

Cookies

We use cookies to keep the site working (for example, sessions and basket/order flow) and to remember your choices (for example, cookie consent). For more details, see our Cookie Policy.

Retention

We keep personal data only as long as needed for the purposes described above, including for resolving disputes and meeting legal, accounting or reporting requirements.

Security

We take reasonable steps to protect your data. No method of transmission or storage is 100% secure; please contact us if you believe your data has been compromised.

Your rights

You may have rights under applicable data protection law, including the right to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. You may also have the right to data portability.

Contact us

If you have questions about this policy or want to exercise your rights, please contact us using the details on the Contact Us page.

Changes to this policy

We may update this policy from time to time. We recommend checking this page periodically for changes.