Privacy Policy

This Privacy Policy explains how Bombay Bicycle Chef(“we”, “us”) collects and uses your personal data when you visit our website, place an order, make a reservation, buy or redeem a gift card, or join our mailing list. We are the data controller for that information.

Who we are

Data controller: Bombay Bicycle Chef. For any privacy question or request, contact us at info@bombaybicyclechef.com.

What we collect

• Contact & order details — name, email, phone, and (for delivery) your address.
• Order & reservation history — items, dates, party size, preferences and notes you provide.
• Payment information — processed securely by Stripe. We never see or store your full card number.
• Account & loyalty data — if you create an account: your sign-in details, loyalty points and saved preferences.
• Marketing preferences — whether you have opted in to email/SMS, and your consent record.
• Technical data — basic device/usage information needed to run the site securely.

How we use it & our lawful bases

• To fulfil your order or reservation and take payment — performance of a contract.
• To run loyalty, gift cards and your account — contract and our legitimate interests.
• To send marketing (offers, news) — only with your consent, which you can withdraw at any time.
• To keep the service secure and meet legal/tax obligations — legitimate interests and legal obligation.

Who we share it with

We only share data with service providers who process it on our behalf, including:

• Stripe — payment processing.
• Brevo — transactional and marketing email.
• Twilio / WhatsApp — SMS and messaging notifications (if enabled).
• Supabase & our hosting provider — secure data storage and delivery.

We do not sell your personal data.

How long we keep it

We keep order and transaction records for as long as required for tax and accounting (typically six years), and other data only for as long as needed for the purpose it was collected. Marketing data is kept until you unsubscribe.

Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict or port your data, and you can object to processing or withdraw consent. To exercise any of these, email info@bombaybicyclechef.com. You can unsubscribe from marketing at any time via the link in our emails. If you’re unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We use only the cookies necessary to run the site and keep you signed in. If we introduce analytics or marketing cookies in future, we will ask for your consent first.

Security

We protect your data with encryption in transit, strict database access controls, and PCI-compliant payment handling through Stripe. No system is perfectly secure, but we work hard to keep your information safe.

Changes

We may update this policy from time to time. The date at the top shows when it was last revised.