Privacy Policy

Richard's Cafe ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at richardscafe.co.uk or interact with us in any way.

We are a UK-based business and operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions or concerns, please contact us using the details at the bottom of this page.

1. Who We Are

The data controller responsible for your personal data is:

2. Information We Collect

We may collect the following categories of personal information:

• —
  Contact information — your name and phone number if you call ahead to place a collection order.
• —
  Usage data — anonymous information about how our website is used, such as pages visited, the referring website, browser and device type, screen size, language and approximate country, collected automatically by our cookie-free analytics tool (see section 4).
• —
  Communications — any messages or enquiries you send to us by phone or through third-party platforms.
• —
  Order data — if you order through a third-party delivery platform (Deliveroo, Uber Eats, Just Eat), your order and delivery details are handled directly by those platforms under their own privacy policies.

We do not collect payment card information directly. All payments are processed via third-party providers or handled in person at the cafe.

3. How We Use Your Information

We use the information we collect to:

• —
  Process and manage your collection or telephone orders.
• —
  Respond to your enquiries and provide customer support.
• —
  Improve and maintain our website through anonymised analytics.
• —
  Comply with our legal obligations.

Our lawful basis for processing is legitimate interests (to operate our business and improve our services), contractual necessity (to fulfil your order), and legal obligation where applicable. We do not use your data for automated decision-making or profiling.

4. Cookies and Analytics

We do not set any cookies, and we do not store any tracking information on your device. The only exception is the Google Maps embed on our Contact page, which may set Google's own cookies (see section 5).

To understand how visitors use our website, we use Umami, a privacy-focused, open-source analytics tool. It runs on a private server operated by our website provider, not by a third-party advertising or analytics company. Umami records anonymous, aggregated statistics such as pages visited, the referring website, browser, operating system, device type, screen size, language and approximate country.

Umami does not use cookies, does not store your IP address, and does not track you across other websites. The data cannot be used to identify you personally, and it is never sold or used for advertising.

5. Third-Party Services

Our website and services interact with certain third-party platforms. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies:

• —
  Deliveroo, Uber Eats, Just Eat — online ordering and delivery platforms.
• —
  Instagram / Facebook (Meta) — social media platforms linked from our website. If you visit our social profiles, Meta's privacy policy applies.
• —
  Umami — self-hosted, cookie-free website analytics, as described in section 4. No data is shared with third parties.
• —
  Google Maps — our Contact page includes an embedded map and Street View from Google. When that page loads, Google receives your IP address and browser details, and may set cookies, under Google's privacy policy. Other pages do not load Google Maps.

6. Data Retention

We only retain your personal data for as long as is necessary for the purposes set out in this policy. Telephone order details (name and order) are retained only for the duration of fulfilling the order and are not stored thereafter. Anonymous website analytics data may be retained for up to 26 months.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• —
  Right of access — you can request a copy of the personal data we hold about you.
• —
  Right to rectification — you can ask us to correct inaccurate data.
• —
  Right to erasure — you can request that we delete your personal data, subject to legal obligations.
• —
  Right to object — you can object to us processing your data on the basis of legitimate interests.
• —
  Right to data portability — you can request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at 01273 776 374 or visit us at 113A Church Road, Hove, BN3 2AF. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. Our website is served over HTTPS and we limit access to any personal data to those who need it to operate our business. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.