Privacy Policy for Varenik&Pelmen
This Privacy Policy explains how Varenik&Pelmen (“we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you use our website www.eatpelmeni.com, visit our market stalls, use our services, or interact with us in any way. We are committed to protecting your privacy and handling your data responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
Information You Provide Directly
When you interact with us, you may provide personal information including: your name and contact details (email address, phone number) when you contact us, sign up for our loyalty programme, or make a catering enquiry; your delivery address if you order products for delivery; payment information when making purchases (processed securely through our payment providers — we do not store your full payment card details); feedback, reviews, and communications you send to us; and information you provide when applying for franchise opportunities.
Information Collected Automatically
When you visit our website, we may automatically collect technical information including: your IP address and approximate location; browser type and version; operating system; pages visited and time spent on our website; referring website addresses; and cookie data (see our Cookie Policy for details).
Information from Third Parties
We may receive information about you from third parties, including social media platforms (if you interact with our social media accounts), payment processors, and analytics providers.
How We Use Your Information
Service Delivery
We use your personal information to provide our services, including processing orders and deliveries, responding to enquiries and customer service requests, managing catering bookings, and operating our loyalty programme.
Communication
We may use your contact information to send you updates about our market schedule and locations, respond to your feedback and enquiries, send marketing communications (only with your consent), and notify you about changes to our services or policies.
Website Improvement
We use automatically collected data to analyse website traffic and usage patterns, improve our website functionality and user experience, identify and fix technical issues, and understand our audience better.
Legal Basis for Processing
Under UK GDPR, we process your personal data based on the following legal grounds: Consent — where you have given clear consent for us to process your data for a specific purpose (e.g., marketing emails). Contract — where processing is necessary to fulfil a contract with you (e.g., processing a catering order). Legitimate Interests — where processing is in our legitimate business interests (e.g., improving our website), provided these interests do not override your rights. Legal Obligation — where we need to process your data to comply with the law.
Data Sharing
Third-Party Service Providers
We may share your data with trusted third-party service providers who help us operate our business, including payment processors, delivery services, email marketing platforms, analytics providers, and website hosting services. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit, secure storage systems, access controls limiting who can view personal data, and regular security reviews and updates.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When data is no longer needed, we securely delete or anonymise it.
Your Rights Under UK GDPR
Your Data Protection Rights
Under UK data protection law, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (in certain circumstances); object to or restrict our processing of your data; data portability — receive your data in a structured, commonly used format; and withdraw consent at any time where processing is based on consent.
How to Exercise Your Rights
To exercise any of these rights, please contact us. We will respond to your request within one month, as required by law. We may ask you to verify your identity before processing your request.
Children’s Privacy
Our website is not directed at children under 13 years of age, and we do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.