Privacy Notice

Privacy Disclosures & Data Rights for Customers of Ginger and Spice (UK & EU GDPR)

1. Data Controller Information

Under the UK General Data Protection Regulation (UK GDPR) and EU GDPR, Ginger and Spice ("we", "our") is the Data Controller responsible for the customer personal data collected when you place an order on this storefront.

Business Name: Ginger and Spice

Operating Address: 10 Ratcliffe Dr, Stoke Gifford, Bristol BS34 8UE, UK,

Email: info@gingerandspicebristol.com

Phone: 01179470074

2. SaaS Infrastructure & Technical Processor

Technical data processing, database hosting, online cart persistence, and cloud infrastructure are provided by FoodTakeaway.co.uk acting strictly as the Data Processor on behalf of Ginger and Spice.

3. Information Collected & Purpose

To fulfill your order, we collect and process the following information under the legal basis of Contractual Performance:

Contact Details: Your name, phone number, and email address for order notifications and kitchen inquiries.
Fulfillment Data: Delivery address, pickup preference, table number (for dine-in), and food item choices.
Payment Confirmation: Payment status and transaction reference (processed securely via Stripe; full card numbers are never stored by us).

4. Authorized Sub-Processors

Your order data is shared exclusively with authorized third-party service providers required for fulfillment:

Stripe: Payment gateway processing.

Google Cloud / Firebase: Secure database, authentication, and push notification hosting.

Google Maps API: Address verification and delivery area geocoding.

Exercising Your Data Rights

You have the right to request access to your data, request corrections, or ask for your personal data to be deleted under GDPR. Please contact Ginger and Spice directly at info@gingerandspicebristol.com or email privacy@foodtakeaway.co.uk for platform assistance.