Privacy Policy

Richard's Cafe ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at richardscafe.co.uk or interact with us in any way.

We are a UK-based business and operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions or concerns, please contact us using the details at the bottom of this page.

1. Who We Are

The data controller responsible for your personal data is:

2. Information We Collect

We may collect the following categories of personal information:

• —
  Contact information — your name and phone number if you call ahead to place a collection order.
• —
  Usage data — information such as your IP address, browser type, pages visited, and time spent on our website, collected automatically via cookies and analytics tools.
• —
  Communications — any messages or enquiries you send to us by phone or through third-party platforms.
• —
  Order data — if you order through a third-party delivery platform (Deliveroo, Uber Eats, Just Eat), your order and delivery details are handled directly by those platforms under their own privacy policies.

We do not collect payment card information directly. All payments are processed via third-party providers or handled in person at the cafe.

3. How We Use Your Information

We use the information we collect to:

• —
  Process and manage your collection or telephone orders.
• —
  Respond to your enquiries and provide customer support.
• —
  Improve and maintain our website through anonymised analytics.
• —
  Comply with our legal obligations.

Our lawful basis for processing is legitimate interests (to operate our business and improve our services), contractual necessity (to fulfil your order), and legal obligation where applicable. We do not use your data for automated decision-making or profiling.

4. Cookies

Our website uses cookies — small text files stored on your device — to help the site function correctly and to understand how visitors use it. We use the following types of cookies:

You can manage or disable cookies through your browser settings. Disabling analytics cookies will not affect your ability to use our website.

5. Third-Party Services

Our website and services interact with certain third-party platforms. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies:

• —
  Deliveroo, Uber Eats, Just Eat — online ordering and delivery platforms.
• —
  Instagram / Facebook (Meta) — social media platforms linked from our website. If you visit our social profiles, Meta's privacy policy applies.
• —
  Google Fonts — used to display typography on this site. Google may collect your IP address when fonts are loaded.

6. Data Retention

We only retain your personal data for as long as is necessary for the purposes set out in this policy. Telephone order details (name and order) are retained only for the duration of fulfilling the order and are not stored thereafter. Anonymised website analytics data may be retained for up to 26 months.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• —
  Right of access — you can request a copy of the personal data we hold about you.
• —
  Right to rectification — you can ask us to correct inaccurate data.
• —
  Right to erasure — you can request that we delete your personal data, subject to legal obligations.
• —
  Right to object — you can object to us processing your data on the basis of legitimate interests.
• —
  Right to data portability — you can request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at 01273 776 374 or visit us at 113A Church Road, Hove, BN3 2AF. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. Our website is served over HTTPS and we limit access to any personal data to those who need it to operate our business. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.