Privacy Policy

Last updated: April 2025

1. Who We Are

The Jacket & Mash Co. Ltd. ("we", "our", "us") operates the website at jacketandmash.co.uk and the restaurant at 26 High Street, Worthing, West Sussex, BN11 1NU. We are the data controller for the personal information described in this policy.

Contact: info@jacketandmash.co.uk | 01903 255 490

2. What Information We Collect

We may collect and process the following personal data:

Identity & contact data — name, email address, phone number when you place an order or contact us.
Order data — items ordered, special requests, order history.
Payment data — processed securely via [PLACEHOLDER — payment provider]. We do not store full card details.
Delivery data — delivery address where applicable.
Technical data — IP address, browser type, device information, pages visited, and time on site — collected automatically via cookies and analytics tools.
Marketing preferences — whether you have consented to receive marketing communications from us.

3. How We Use Your Information

We use your personal data to:

Process and fulfil your orders (contractual necessity).
Send order confirmations and operational updates by email or SMS.
Manage our relationship with you, including responding to enquiries.
Improve our website and services using aggregated analytics data.
Send marketing communications where you have given consent — you can withdraw this at any time.
Comply with legal and regulatory obligations.
Detect and prevent fraud or misuse of our services.

4. Third-Party Services

We share data with trusted third parties only where necessary:

Google (Analytics & Ads) — We use Google Analytics to understand how visitors use our website. Google may use this data in accordance with their own privacy policy. You can opt out via Google's opt-out tool. We may also use Google Ads remarketing — [PLACEHOLDER: confirm if in use].
Meta (Facebook & Instagram) — We may use Meta Pixel to measure ad performance and show relevant ads on Facebook and Instagram. Meta may associate this with your Facebook account. See Meta's Privacy Policy for details — [PLACEHOLDER: confirm if Meta Pixel is active].
[PLACEHOLDER — payment provider] — Payment processing. Their privacy policy applies to payment data.
[PLACEHOLDER — email/SMS provider] — Order confirmation and marketing communications.
[PLACEHOLDER — delivery platform] — If you order via a third-party delivery app, their privacy policy also applies.

5. Legal Basis for Processing

Under UK GDPR, our legal bases for processing personal data are:

Contract — processing your order.
Legitimate interests — fraud prevention, improving our services, analytics.
Consent — marketing communications and non-essential cookies.
Legal obligation — where required by law (e.g. tax records).

6. Data Retention

We retain personal data only for as long as necessary. Order records are kept for up to 7 years for tax and legal purposes. Marketing consent records are kept until you withdraw consent. Analytics data is retained per the third-party provider's default retention settings — [PLACEHOLDER: confirm Google Analytics data retention setting].

7. Your Rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your data where there is no lawful reason to retain it.
Restriction — ask us to pause processing of your data in certain circumstances.
Portability — receive your data in a structured, machine-readable format.
Object — object to processing based on legitimate interests or for direct marketing.
Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, email info@jacketandmash.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

We use cookies and similar tracking technologies on our website. Please see our Cookie Policy for full details.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the latest revision. We encourage you to review it periodically.