Skip to main content
    JCJaflongCatering

    Privacy Policy

    Last updated: March 2026

    1. Introduction

    Jaflong Tandoori Catering ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our website jaflongcatering.co.uk and our catering services.

    2. Data We Collect

    Personal Data

    • Name, email address, phone number (from quote enquiries)
    • Event details: guest count, date, venue, dietary requirements
    • Company name (for corporate clients)

    Automatically Collected Data

    • IP address and browser type
    • Pages visited and time spent on site
    • Device information and referral source

    We do not collect payment card information directly — all payments are processed via secure third-party providers.

    3. How We Use Your Information

    • Respond to catering enquiries and provide quotes
    • Process and manage your bookings and events
    • Send booking confirmations and event updates
    • Improve our website and services via analytics
    • Send marketing communications (only with your explicit consent)
    • Comply with legal obligations

    4. Legal Basis for Processing (UK GDPR)

    • Contract: Processing your enquiry and fulfilling catering bookings
    • Legitimate interest: Website analytics, improving services, fraud prevention
    • Consent: Optional marketing emails and newsletter sign-up — you may withdraw consent at any time

    5. Data Sharing

    We do not sell your personal information. We may share your data with:

    • Service providers who assist with our operations (email delivery, hosting)
    • Professional advisors (accountants, lawyers) where required
    • Law enforcement when required by law

    Third-Party Services

    • Google Analytics (anonymised IP, data retained 26 months)
    • Hosting infrastructure (GDPR-compliant EU servers)

    6. Data Retention

    • Enquiries: 12 months from submission
    • Booking records: 7 years (UK accounting law)
    • Analytics data: 26 months (Google Analytics standard)

    You may request early deletion at any time (see Your Rights below).

    7. Your Rights (UK GDPR)

    Under UK GDPR, you have the right to:

    • Access: Request a copy of data we hold about you
    • Rectification: Correct inaccurate or incomplete data
    • Erasure: Request deletion of your personal data
    • Restriction: Restrict how we process your data
    • Data portability: Receive your data in a portable format
    • Objection: Object to processing based on legitimate interest
    • Withdraw consent: For consent-based processing, at any time

    To exercise any of these rights, email us at jaflongcatering@gmail.com. We will respond within 30 days.

    You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

    8. Cookies

    We use essential cookies for site functionality and analytics cookies (with your consent) to understand how visitors use our website. No marketing or third-party tracking cookies are used. For full details, see our Cookie Policy.

    9. Security

    We implement appropriate technical and organizational measures to protect your personal data. Data is stored on GDPR-compliant infrastructure with SSL encryption on all pages. Access to personal data is restricted to authorised personnel only.

    10. Contact Us

    For any privacy-related questions or to exercise your rights, contact:

    Data Protection Contact
    Jaflong Tandoori Catering
    16 Ashburnham Road, Richmond, London TW10 7NF
    Email: jaflongcatering@gmail.com
    Phone: 020 8332 1339