Skip to main content
Legal

Privacy Policy

TIKKA & TREATS LIMITED ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy informs you how we look after your personal data when you visit our website, order food through our platform, or interact with us, and tells you about your privacy rights under UK GDPR and the Data Protection Act 2018.

Last updated: September 2026

1. Introduction

This policy explains how we collect and use personal data when you use our website, place a food order, or otherwise interact with us.

2. Important information and who we are

TIKKA & TREATS LIMITED is the data controller responsible for your personal data.

  • Company Registration Number: 17002622
  • Registered Office: 38 Roscoe Street, Scarborough, North Yorkshire, YO12 7BX, United Kingdom
  • Data Protection Contact: tikkaandtreats@gmail.com
  • Phone: 07344239447

3. The data we collect about you

We may collect, use, store, and transfer different kinds of personal data about you, including:

  • Identity Data: First name, last name.
  • Contact Data: Delivery address, billing address, email address, and telephone number.
  • Transaction Data: Details about payments to and from you, and details of products/food items you have purchased from us.
  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
  • Health/Dietary Data: Information regarding dietary requirements or food allergies that you voluntarily provide when placing an order. Our kitchen handles dishes that may contain or come into contact with: Gluten, Crustaceans, Eggs, Fish, Peanuts, Soybeans, Milk, Nuts, Celery, Mustard, Sesame, Sulphites, Lupin, and Molluscs.

4. How we collect your personal data

We use different methods to collect data from and about you including through:

  • Direct Interactions: You give us your Identity, Contact, and Financial Data by filling in online forms or ordering food via our website/app.
  • Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns using cookies and server logs.

5. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

  • To fulfill and deliver your food order (Contractual Obligation).
  • To contact you regarding order progress, delivery status, or delays (Contractual Obligation).
  • To manage our relationship with you, including notifying you about changes to our terms or privacy policy (Legal Duty).
  • To protect our business and premises via CCTV systems (Legitimate Interest).
  • To send you marketing communications, only if you have explicitly opted in (Consent).

6. CCTV surveillance

Our kitchen premises operate Closed Circuit Television (CCTV) for the purpose of crime prevention, security, and staff/public safety.

  • CCTV footage is stored securely for up to 30 days.
  • Access is strictly limited to authorized personnel and law enforcement agencies upon lawful request.

7. Disclosures of your personal data

We do not sell, rent, or trade your personal data. We may share your personal data with trusted third parties solely to complete your order:

  • Food delivery drivers and courier partners.
  • Payment service providers and merchant payment gateways.
  • IT, web hosting, and system administration services.
  • Professional advisers and regulatory bodies (e.g., ICO, HMRC) if legally required.

8. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is restricted to employees and partners who have a business need-to-know.

9. Data retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (e.g., HMRC tax records for up to 6 years).

10. Your legal rights

Under UK data protection laws, you have rights including:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of incomplete or inaccurate data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to Object: Object to processing of your personal data for direct marketing.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.