Privacy Policy

Effective Date: 28/07/2025

Heart & Soul Flavour (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring that your personal data is handled in accordance with the law. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website or services.

1. Who We Are

Heart & Soul Flavour
106 McLeod Rd, London SE2 0BS
United Kingdom
Email: info@heartandsoulflavour.co.uk
Phone: 020 4568 7932

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR).

2. What Information We Collect

We may collect the following types of personal information:

• Identity Data: Name, email address, phone number, and billing/delivery address
• Order Details: Items ordered, preferences, allergy information (if voluntarily provided)
• Payment Information: Payment method and transaction data (processed securely via third-party providers)
• Technical Data: IP address, browser type, operating system
• Communication Data: When you contact us by email, phone, or website forms

3. How We Use Your Information

We use your data for the following purposes:

• To process and deliver your orders
• To manage reservations and bookings
• To communicate with you about your order, feedback, or enquiries
• To improve our website, services, and customer experience
• To comply with legal obligations (e.g., tax, food safety regulations)
• To send promotional offers or newsletters (only if you opt in)

4. Legal Basis for Processing

We only process your personal data when legally permitted. The legal bases include:

• Consent: You have given clear permission (e.g., newsletter signup)
• Contractual Necessity: To fulfill an order or booking request
• Legal Obligation: To comply with the law
• Legitimate Interests: For running our business and improving services

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Payment processors (e.g., Stripe, PayPal)
• Delivery providers
• IT service providers (e.g., hosting, email)
• Government or legal bodies when required by law

All third parties are required to handle your data securely and lawfully.

6. Data Retention

We retain your personal data only for as long as necessary:

• For order and transaction history: up to 6 years (for tax/legal reasons)
• For marketing data: until you unsubscribe or withdraw consent
• For reservation records: up to 1 year

When no longer needed, data is securely deleted or anonymised.

7. Your Rights

You have the following rights under UK data protection law:

• Right to access your data
• Right to correct inaccurate data
• Right to request erasure (“right to be forgotten”)
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at info@heartandsoulflavour.co.uk.

8. Data Security

We use appropriate security measures to protect your personal data, including:

• SSL encryption on our website
• Secure payment processing via third parties
• Limited access to personal data by authorised staff only

9. Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes in our practices or legal obligations. The latest version will always be available on this page with the effective date.

10. Contact Us

If you have any questions about this Privacy Policy or your data, please contact:

Email: info@heartandsoulflavour.co.uk
Phone: 020 4568 7932
Postal Address: 106 McLeod Rd, London SE2 0BS, United Kingdom