Privacy Policy

1. Introduction

 
Welcome to the website of TOC WAKEFIELD LTD (referred to as “we,” “us,” or “our”). We are committed to protecting the privacy and security of the personal information you provide when using our website, ordering food, or engaging with our services. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, and aligns with the requirements of our payment processor, Stripe.
 
By accessing our website or placing an order, you consent to the collection and use of your personal information as outlined in this policy.
 
 

2. Information We Collect

 
We collect the following types of personal information to process your orders and improve our services:
 
2.1 Personal Identification Information
 
  • Full name
  • Contact details (phone number, email address)
  • Delivery/dine-in address (where applicable)
 
2.2 Order & Transaction Information
 
  • Order history, including items purchased, preferences, and special requests
  • Payment details (processed securely via Stripe; we do not store full credit/debit card numbers on our systems)
  • Transaction dates, times, and amounts
 
2.3 Website Usage Information
 
  • IP address, browser type, and device information
  • Pages visited, time spent on the site, and referral sources (collected via analytics tools to improve user experience)
 
 

3. How We Use Your Information

 
We use your personal information for the following legitimate purposes:
 
  • To process and fulfill your food orders (including dine-in, takeaway, and delivery)
  • To manage payments and refunds securely via Stripe
  • To communicate with you regarding your order status, inquiries, or customer support
  • To send important service updates, such as changes to our menu, opening hours, or policies (you may opt out of non-essential communications at any time)
  • To improve our website, services, and customer experience through analytics
  • To comply with legal, tax, and regulatory obligations
 
 

4. Data Sharing & Disclosure

 
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your data only in the following limited circumstances:
 
  • Payment Processing: Your payment details are shared securely with Stripe Payments Europe, Ltd. (Stripe) to process transactions. Stripe handles all card data in compliance with PCI DSS standards, and we do not retain full card details.
  • Service Providers: We may share your information with trusted third-party service providers who assist in operating our business (e.g., delivery partners, website hosting, and analytics tools), all of whom are bound by strict data protection obligations.
  • Legal Requirements: We may disclose your information to comply with legal obligations, court orders, or government requests, or to protect our rights, property, or safety.
 
 

5. Data Security

 
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. This includes:
 
  • Secure socket layer (SSL) encryption for all data transmitted via our website
  • Restricted access to personal data within our organization
  • Regular security audits and updates to our systems
  • Partnering with Stripe, a PCI DSS Level 1 compliant payment processor, to handle all payment transactions securely
 
While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
 
 

6. Your Rights

 
Under UK GDPR, you have the following rights regarding your personal data:
 
  • Access: Request a copy of the personal information we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your data (where applicable)
  • Restriction: Request restriction of processing your data
  • Data Portability: Request transfer of your data to another service provider
  • Objection: Object to the processing of your data for certain purposes
 
To exercise any of these rights, please contact us at tocwakefield@hotmail.com or +44 7477 499305. We will respond to your request within the statutory timeframe (usually 1 month).
 
 

7. Cookies & Tracking Technologies

 
Our website uses cookies and similar tracking technologies to enhance your user experience and analyze website traffic. You can manage your cookie preferences through your browser settings. For more details, please review our separate Cookie Policy (available on our website).
 
 

8. Changes to This Policy

 
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised effective date. We encourage you to review this policy periodically.
 
 

9. Contact Us

 
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
 
Company Name: TOC WAKEFIELD LTD
 
Address: 83a Leeds Rd, Harrogate, HG2 8BE
 
Phone: +44 7477 499305
 
Email: tocwakefield@hotmail.com