1. Who We Are (The Data Controller)

The “Controller” of your personal data is:

• Business Name: Mayflower Chinese Takeaway

• Address: 3 Victoria Road, Ellesmere Port, Cheshire, CH65 8BU, United Kingdom

• Phone: 0151 355 0300

• Website: www.mayflowerellesmereport.co.uk

• Email: info@mayflowerellesmereport.co.uk

This policy explains how we process your data when you order food from our website.

2. What Data We Collect & Why

We collect the following personal data to process your order:

• Identity Data: First name, Last name.

• Contact Data: Delivery address, Phone number, Email address.

• Technical Data: IP address, browser type, and device information (collected automatically for security and fraud prevention).

• Financial Data: If you pay online, payment details (Card number, CVV, expiry) are processed securely by our payment provider. We do not store your full card details.

We process this data for the following purposes:

1. To fulfill your order: We need your address to deliver your food and your phone number/email to update you on the status (e.g., “Order Confirmed”).

2. Legal Obligations: To comply with UK tax and accounting laws.

3. Marketing: If you have opted-in, we may send you offers. You can unsubscribe at any time.

3. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), our lawful bases for processing are:

• Contract: Processing is necessary to fulfill the food order you placed.

• Legal Obligation: We are required by law to keep records of sales.

• Legitimate Interest: To improve our services and prevent fraud.

4. Sharing Your Data

We may share your data with trusted third parties who help us run our business (“Data Processors”):

• Online Ordering Provider: Our website uses a third-party ordering system (GloriaFood) to transmit your order to our kitchen.

• Delivery Drivers: To ensure your food reaches your address.

• Payment Processors: To securely handle online payments.

• Email/SMS Providers: To send you order confirmations (e.g., Sendgrid, Twilio).

5. International Transfers

Because our ordering system partners with global providers, some data (like your email for confirmations) may be processed outside the UK (e.g., in the USA). We ensure your data is protected through:

• UK Data Bridge / Adequacy Decisions: Transfers to countries recognized by the UK as providing adequate protection.

• Standard Contractual Clauses (SCCs): Legal contracts that require the US provider to protect your data to UK standards.

6. How Long We Keep Your Data

We keep your personal data only as long as necessary:

• Order Details: Kept for 6 years for UK tax and accounting purposes.

• Marketing Data: Kept until you unsubscribe or ask us to delete it.

7. Your Rights

Under UK law, you have the right to:

• Access: Request a copy of the personal data we hold about you.

• Rectification: Ask us to correct wrong information.

• Erasure: Ask us to delete your data (the “Right to be Forgotten”), unless we need it for tax/legal reasons.

• Restriction: Ask us to limit how we use your data.

• Object: Object to us using your data for marketing.

To exercise any of these rights, please contact us at 3 Victoria Road, Ellesmere Port, CH65 8BU or call 0151 355 0300.

8. Cookies

Our website uses cookies to make the ordering system work (e.g., remembering what is in your basket).

• Strictly Necessary Cookies: Essential for the website to function.

• Performance Cookies: Help us understand how many visitors we have (e.g., Google Analytics). By using our website, you agree to the use of these essential cookies. You can manage cookie settings in your browser.

9. Complaints

If you are not happy with how we handle your data, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

• Website: www.ico.org.uk

• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

---

Changes to this Policy We may update this policy from time to time. Last Updated: January 2026