Privacy Policy

This Privacy Policy explains how Continental Graze (“we”, “us”, “our”) collects, uses and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are:

- Business Name: Continental Graze.

- Business Address: 56 Mill Lane, Saxilby, LN1 2QG.

- Email: info@continentalgraze.co.uk.

- Phone: +44 (0)7890396479.

For the purposes of data protection law, we are the “data controller” of your personal data.

2. What Personal Data We Collect:

We may collect and process the following information:

- Full name

- Email address

- Telephone number

- Billing and delivery address

- Event details (date, venue, guest numbers)

- Dietary requirements and allergen information

- Payment details (processed securely via third-party providers)

- Website usage data (via cookies and analytics tools)

We only collect data necessary to provide our catering services.

3. How We Use Your Data:

We use your personal data to:

- Respond to enquiries Process and manage bookings

- Deliver catering services Issue invoices and process payments

- Comply with legal obligations (e.g. tax records)

- Improve our website and services

- Send marketing communications (only where you have opted in)

4. Lawful Basis for Processing Under UK GDPR, we rely on the following lawful bases:

- Contract – to fulfil your booking

- Legal obligation – for tax and regulatory compliance

- Legitimate interests – to operate and improve our business

- Consent – for marketing communications

You may withdraw consent for marketing at any time.

5. Payment Information:

We do not store full card details. Payments are processed securely via third-party payment providers (e.g. Stripe, PayPal, Square), who process your data in accordance with their own privacy policies.

6. Sharing Your Data:

- We only share your data where necessary, including: Accountants and professional advisers

- Payment processors IT and website hosting providers

- Legal or regulatory authorities where required

We do not sell your personal data.

7. Data Retention:

We retain personal data only for as long as necessary:

- Booking and invoice records are typically retained for 6 years for HMRC compliance.

Enquiry data may be deleted after 12–24 months if no booking is made.

8. Your Data Protection Rights Under UK GDPR, you have the right to:

- Access your personal data Request correction of inaccurate data

- Request erasure (“right to be forgotten”)

- Restrict processing

- Object to processing

- Request data portability

To exercise your rights, please contact us at info@continentalgraze.co.uk.

If you are not satisfied with how we handle your data, you may complain to the Information Commissioner’s Office (ICO): https://www.ico.org.uk⁠

9. Food Allergy Information:

Where you provide dietary or allergen information, this may constitute health-related data. We process this information solely for the purpose of fulfilling your catering requirements and ensuring food safety.

10. Website Cookies:

Our website may use cookies and analytics tools (e.g. Google Analytics) to improve user experience. You can manage cookie preferences through your browser settings. A separate Cookie Policy may apply.

11. Data Security:

We take appropriate technical and organisational measures to protect your data, including: Secure email systems Password-protected devices Secure payment gateways

12. Changes to This Policy :

We may update this Privacy Policy from time to time. The latest version will always be available on our website.