Privacy Policy
This policy explains what we do with your information when you use spice-street.co.uk or get in touch with us. If you order through Uber Eats or Just Eat, those companies handle your data under their own privacy policies, not this one.
Who we are
Spice & Street is an Indian street food kitchen at Unit 7, Goodsheds, Hood Road, Barry, Vale of Glamorgan CF62 5QU. We are the data controller for this website.
You can reach us on 07850 257667 or at mk@spice-street.co.uk.
What information we collect
- Information you give us. If you phone us, message us on WhatsApp or email us, we receive your name, phone number or email address, and whatever you choose to tell us — usually your order and when you want to collect it.
- Technical information. When you load a page, your browser sends information to our web host, including your IP address, browser type and the pages you viewed. Our host keeps this in standard server logs.
We do not take payments on this website and we do not ask you to create an account.
Cookies
This site uses only the cookies needed to make it work — those set by WordPress and by our caching software so pages load correctly. We do not use advertising cookies and we do not track you across other websites.
You can block or delete cookies in your browser settings. The site will still work.
Content from other websites
Some pages include content hosted elsewhere. The Visit section of our home page embeds a Google map, and Google may set cookies and collect information when that map loads. We also link out to Uber Eats, Just Eat, Instagram and the Food Standards Agency register. Once you follow a link or load embedded content, that company’s own privacy policy applies.
How we use your information
- To answer your message or take your order.
- To prepare and hand over the food you have ordered.
- To keep the records we are required to keep by law, such as food safety and tax records.
- To keep the website running and secure.
We do not sell your information, and we do not send marketing messages unless you have asked us to.
Our legal basis
Under UK GDPR we rely on legitimate interests to answer enquiries and run the business, on performance of a contract when you place an order with us, and on legal obligation where the law requires us to keep records.
How long we keep it
We keep enquiry messages for no longer than twelve months unless there is a reason to keep them longer, such as an ongoing complaint. Server logs are kept by our hosting provider for their standard retention period. Records we are legally required to keep are held for as long as the law requires.
Who we share it with
- Our web host, who stores the website and its server logs on our behalf.
- Uber Eats and Just Eat, if you choose to order through them. In that case they collect your details directly and pass us what we need to fulfil the order.
- Anyone we are legally required to share with, such as environmental health or HMRC.
Your rights
You have the right to ask us for a copy of the information we hold about you, to have it corrected or deleted, to object to how we use it, to ask us to restrict its use, and to ask for it in a portable format. Email mk@spice-street.co.uk and we will respond within one month.
If you are not happy with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
If we change how we handle information — for example if we add website analytics or online ordering — we will update this page and change the date at the top.