Privacy Policy
Last updated: April 2025
1. Who We Are
Ayelet's Kosher Catering & Delicatessen ("we", "us", "our") is the data controller for the personal data we collect through this website. Our contact details are: 2 Sentinel Square, London | sales@ayelets.co.uk | 020 8066 8791.
2. What Data We Collect
When you place an order or submit an enquiry, we collect:
- Identity data: your full name
- Contact data: email address and phone number
- Delivery data: delivery address and postcode
- Order data: items ordered, quantities, special instructions, dietary requirements
- Payment data: payment is processed by Stripe — we do not store card details on our servers
- Communications data: any messages you send us
3. How We Use Your Data
We use your personal data to:
- Process and fulfil your orders
- Send you order confirmations and updates
- Respond to your enquiries
- Comply with legal obligations
- Improve our products and services
We rely on contract performance as our legal basis for processing order data, and legitimate interests for service improvement purposes.
4. How Long We Keep Your Data
We retain order and customer data for up to 7 years to comply with UK tax and accounting obligations. Enquiry data is retained for 2 years.
5. Who We Share Data With
We share your data only where necessary:
- Stripe: our payment processor, to handle secure card payments. Stripe's privacy policy can be found at stripe.com/gb/privacy
- Email service providers: to send order confirmations and communications
We do not sell your personal data to any third parties.
6. Cookies
Our website uses minimal cookies necessary for the shopping cart and basic site functionality. We do not currently use advertising or tracking cookies. If this changes, we will update this policy and seek your consent where required.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to processing based on legitimate interests
- Data portability — receive your data in a machine-readable format
To exercise any of these rights, please email sales@ayelets.co.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payments are encrypted using SSL/TLS and processed by Stripe's PCI-DSS compliant infrastructure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date it was last updated.