Privacy Policy

1. Who we are (data controller identity)

The data controller responsible for your personal data is:

SBR ENTERPRISES LIMITED
Company registered in England & Wales, Company Number: 05846304
Registered Office: 1e Finsbury Park Road, London, England, N4 2LA
Email: info@sbrenterprisesltd.com
Website: sbrenterprisesltd.com

If you have any questions about this policy or how we handle your data, please contact us at the email address above.

2. The personal data we collect

We collect and process the following categories of personal data:

• Enquiry data — your name, email address and the contents of your message when you contact us via the website contact form or by email, including details about catering or private hire requirements.
• Booking and order data — information you provide when arranging catering, a business account or private hire, such as event dates, headcount, dietary requirements, delivery address and invoicing details.
• Technical data — your IP address, browser type and version, device information, pages visited and how you interact with our website, collected through cookies and similar technologies (see our Cookie Policy).
• Correspondence data — records of our communications with you, including complaints and feedback.

We do not knowingly collect special category data (such as health data) except where you choose to share dietary or allergy information with us so we can prepare food safely — we treat this information with particular care.

3. How we use your data and our lawful bases

Purpose	Data used	Lawful basis (UK GDPR Art. 6)
Responding to enquiries submitted via our contact form or email	Enquiry data	Legitimate interests (responding to your request) and steps prior to entering a contract
Providing catering, business account and private hire services, including invoicing	Booking and order data	Performance of a contract
Preparing food safely in line with stated dietary or allergy requirements	Dietary/allergy information you volunteer	Explicit consent; legal obligations relating to food safety
Keeping accounting and tax records	Transaction and invoicing data	Legal obligation
Operating, securing and improving our website	Technical data	Legitimate interests; consent for non-essential cookies
Sending service updates you have asked to receive	Contact details	Consent

4. Cookies

Our website uses a small number of cookies to function and, with your consent, to help us understand how the site is used. Full details of the cookies we use, their purposes and how to manage them are set out in our Cookie Policy.

5. Who we share your data with

We do not sell your personal data. We may share it with the following categories of recipient, only where necessary and under appropriate safeguards:

• Service providers — our website hosting provider, email service provider and IT support, who process data on our instructions under contract.
• Professional advisers — our accountants and, where relevant, legal advisers, for the purposes of accounting, tax and legal compliance.
• Authorities — HM Revenue & Customs, law enforcement or regulators, where we are legally required to do so.

6. International transfers

We aim to keep your personal data within the United Kingdom. Where a service provider processes data outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or a UK adequacy regulation covering the destination country.

7. How long we keep your data (retention)

• General enquiries — up to 12 months after our last correspondence, unless they lead to a booking or order.
• Catering, hire and account records — for the duration of the relationship and up to 6 years afterwards, to meet accounting, tax and limitation-period requirements.
• Technical/cookie data — in line with the retention periods listed in our Cookie Policy.

When data is no longer needed, it is securely deleted or anonymised.

8. Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data in certain circumstances.
• Restriction — ask us to pause processing in certain circumstances.
• Portability — receive data you provided to us in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests, and to any direct marketing at any time.
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email info@sbrenterprisesltd.com. We will respond within one month. We will not usually charge a fee.

9. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

10. Security

We apply appropriate technical and organisational measures to protect your personal data, including access controls, encrypted transmission (HTTPS) and limiting data access to those who need it. No method of transmission over the internet is completely secure, but we work to protect your data and will notify you and the ICO of any breach where the law requires it.

11. Your right to complain

If you are unhappy with how we handle your personal data, please contact us first at info@sbrenterprisesltd.com and we will do our best to resolve it. You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published at sbrenterprisesltd.com with the date of the most recent revision shown above.