Privacy Policy — Braw & Tasty

Braw & Tasty ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and store your information when you use our website and place orders with us.

We are the data controller for the personal data you provide to us. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.What Data We Collect

We only collect the information we need to process your orders and provide our service. This includes:

Data	Why we need it
Your name	To identify your order and address you correctly
Email address	Order confirmations, delivery updates, and support
Postal code	To verify delivery eligibility and process orders
Delivery address & phone	To deliver your order and contact you if needed
Password (hashed)	To secure your account — we never store your password in plain text
Order history	To fulfil orders and provide support
Payment details	Processed securely by Stripe — we never see or store your card details

If you opt in to our newsletter, we also store your subscription preference and the date you opted in.

2.How We Use Your Data

We use your personal data for the following purposes:

To process and deliver your orders
To send you order confirmations, delivery notifications and receipts
To respond to your enquiries via the contact form or email
To send you marketing updates about new meals or offers — only if you've opted in
To comply with our legal obligations (tax records, food safety, etc.)

3.Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your data:

Contract: Processing is necessary to fulfil your order and provide our service to you
Consent: For sending marketing emails — you can withdraw this at any time
Legal obligation: For keeping financial and tax records as required by law
Legitimate interest: For responding to enquiries and improving our service

4.Who We Share Your Data With

We do not sell your personal data to anyone. We only share it with trusted service providers who help us operate:

Stripe — payment processing. Stripe has its own Privacy Policy
Resend — sending transactional and marketing emails on our behalf
Our hosting provider — for secure data storage and server infrastructure

All these providers are contractually required to protect your data and only use it for the purposes we specify.

5.How Long We Keep Your Data

We keep your personal data only for as long as we need it:

Account data: While your account is active, plus 12 months after your last order
Order records: 6 years, as required by UK tax law
Marketing preferences: Until you unsubscribe, plus 12 months as proof of consent
Contact form messages: 24 months from when they were submitted

6.Your Rights

Under UK GDPR, you have the following rights:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Ask us to correct any inaccurate data
Right to erasure: Ask us to delete your data (subject to legal retention requirements)
Right to restrict processing: Ask us to stop using your data in certain ways
Right to data portability: Receive your data in a portable format
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Unsubscribe from marketing at any time

To exercise any of these rights, email us at hello@brawtasty.site. We'll respond within 30 days.

7.Cookies

We use a minimal number of cookies necessary for the site to work:

Session cookie: Keeps you logged in as you navigate the site. Expires when you close your browser or log out.
Stripe cookies: Set by Stripe during checkout to process payments securely.

We do not use advertising or tracking cookies.

8.Data Security

We take the security of your data seriously:

All traffic to and from our site is encrypted using HTTPS
Passwords are hashed using industry-standard bcrypt — we cannot read them
Card details never touch our servers — they go straight to Stripe
Our database is secured and accessible only to authorised staff

9.Marketing Emails

We only send marketing emails to customers who have actively opted in during registration. Every email includes a link to unsubscribe. If you unsubscribe, we'll stop sending you marketing immediately, but you'll still receive order-related emails (confirmations, delivery updates).

10.Children's Privacy

Our service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18.

11.Complaints

If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to resolve your concern first, so please contact us at hello@brawtasty.site.

12.Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. If we make significant changes, we'll notify registered users by email.

13.Contact Us

For any questions about this Privacy Policy or how we handle your data:

Braw & Tasty
Kirkcaldy, Fife, Scotland
Email: hello@brawtasty.site