1. Introduction & Scope
- Who We Are: Unique Fried Chicken based in Sutton Coldfield, Birmingham, UK.
- Purpose: Explain why you collect personal data (e.g., to process orders, manage marketing, customer inquiries), and inform users of their rights and how their data is managed.
2. Personal Data We Collect
a) Automatically Collected Data:
- Device/browser details (e.g., IP address, browser type/version, time zone), cookies, usage data — used for analytics and site optimization.
- This information may be shared with your platform provider (e.g., Shopify) if applicable.
b) Data Provided by You:
- Order-related: Name, billing/shipping address, contact (email, phone), payment details — for order processing, delivery, invoicing, and fraud prevention.
- Communications: Any messages via contact forms, email subscriptions, or queries.
3. Purpose and Legal Basis for Processing
- Fulfilment of a contract (order processing, delivery).
- Legitimate interests (site improvements, analytics, fraud prevention).
- Consent (email marketing newsletters or promotional SMS).
4. Cookies and Similar Technologies
- Explain use of cookies (session vs. persistent, first- vs. third-party).
- Describe purposes: essential functionality, analytics, marketing.
- Provide link to cookie policy and explain how users can manage preferences via browser.
5. Data Sharing & Third Parties
- Payment processors (e.g., Stripe, PayPal).
- Delivery partners (e.g., courier services).
- Marketing tools or analytics services.
- State that third parties may only use data to provide services to you, and with appropriate security commitments.
6. International Data Transfers
- If data is transferred or processed outside the UK (e.g., servers or third-party providers abroad), explain.
- Reference UK data protection safeguards (e.g., adequacy decisions or standard contractual clauses).
7. Data Retention
- Specify retention periods: e.g., order data for tax/accounting (6 years), marketing consents until withdrawn.
- Retention of unsubscribe records to honour opt-out requests.
8. Children’s Privacy
- Clarify that the site is not intended for individuals under 16.
- Encourage guardians to contact you if they believe information was collected from a child.
9. Your Rights
Let users know they have the right to:
- Access, correct, or delete their personal data.
- Opt out of marketing communications.
- Object to processing based on legitimate interests or request restriction/portability.
- Lodge a complaint with the UK Information Commissioner’s Office (ICO), if needed.
10. Security Measures
- State that reasonable technical and organizational measures are in place to keep data secure.
- Acknowledge that no system is entirely secure, but outline your commitment to ongoing security efforts.
11. Changes to This Policy
- Inform that updates may be made and posted on the website.
- Provide the “Effective Date” of the latest version.
12. How to Contact Us
Optionally, designate a data protection contact or manager.
Provide: Business name (Unique Fried Chicken), email (e.g., info@uniquefriedchicken.co.uk), physical mailing address (BA Kings Rd, Sutton Coldfield).