Privacy Policy

Introduction

Jaflong Tandoori ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services.

Information We Collect

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, and delivery address when you place an order or make an enquiry
• Order Information: Details of your orders, preferences, and transaction history
• Communication Data: Records of correspondence when you contact us via phone, email, or our website forms
• Technical Data: IP address, browser type, and device information collected automatically when you visit our website

How We Use Your Information

We use your personal information for the following purposes:

• Processing and fulfilling your food orders
• Communicating with you about your orders and enquiries
• Providing catering quotes and event planning services
• Sending promotional offers (only with your consent)
• Improving our website and services
• Complying with legal obligations

Legal Basis for Processing (GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your data based on:

• Contract: Processing necessary to fulfil your orders
• Consent: When you opt-in to marketing communications
• Legitimate Interests: To improve our services and communicate about your orders
• Legal Obligation: To comply with applicable laws

Data Sharing

We do not sell your personal information. We may share data with trusted third parties who assist in operating our business, including delivery partners and payment processors. All third parties are required to maintain the confidentiality and security of your information.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Order data is typically retained for 7 years for tax purposes.

Your Rights

Under the UK GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us using the details below.

Cookies

Our website uses essential cookies to ensure proper functionality. We may also use analytics cookies to understand how visitors use our site. You can control cookie preferences through your browser settings.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.