Skip to main content
Legal

Privacy Policy

We respect your privacy and are committed to protecting your personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

Last updated: January 2026

1. Who we are

Tikka & Treats ("we", "us", "our") operates an Indian cloud kitchen serving online food orders. Questions about this policy can be sent to hello@tikkaandtreats.co.uk.

2. Information we collect

  • Order information: name, phone number, email (optional), delivery address, postal code, order contents and delivery notes.
  • Communications: messages you send us by phone, email, WhatsApp or contact form.
  • Technical data: IP address, browser type, device and basic usage data collected via essential cookies (see our Cookie Policy).

3. How we use your information

  • To accept, prepare and deliver your order.
  • To contact you about your order or respond to enquiries.
  • To maintain order history and improve our service.
  • To comply with legal, accounting and food-safety obligations.

4. Legal basis

We rely on your consent (provided when you place an order or submit a form) and our legitimate interest in operating the business and meeting legal duties.

5. Sharing your information

We do not sell your personal information. We share it only with trusted service providers who help us operate (hosting, payment processors, delivery partners) and only to the extent needed. These providers are bound by confidentiality and data-protection commitments.

6. Data retention

Order records are retained for up to seven (7) years to meet Canadian tax and accounting requirements. Marketing contact details are kept until you withdraw consent.

7. Your rights

Under PIPEDA you may request access to, correction of, or deletion of your personal information, and you may withdraw consent for non-essential uses at any time. Contact us using the details above and we will respond within 30 days.

8. Security

We use industry-standard safeguards including encrypted connections (HTTPS), access controls and secure cloud infrastructure. No method of transmission is 100% secure, but we work hard to protect your data.

9. Children

Our service is intended for adults. We do not knowingly collect personal information from children under 13.

10. Complaints

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at ico.org.uk.

11. Updates

We may update this policy from time to time. Material changes will be posted on this page with a new "Last updated" date.