Privacy Policy

Information We Collect

We may collect different types of information depending on how you interact with Claypot Lane.

Personal and Contact Information

• Full name and contact details.
• Email address and telephone number.
• Delivery address and collection preferences.
• Information provided through customer enquiries.

Order Information

• Selected food items, quantities and order details.
• Order references and transaction records.
• Delivery instructions and collection arrangements.
• Relevant correspondence about an order.

Website Information

• Browser type, device information and operating system.
• Website pages visited and basic usage information.
• IP address and technical information where collected.
• Cookie preferences and related website settings.

How We Use Your Information

Information collected through our website is used for clear and relevant business purposes, including:

• Processing and confirming food orders.
• Arranging collection and delivery where available.
• Responding to questions and customer requests.
• Providing updates about order progress.
• Maintaining website functionality and performance.
• Keeping appropriate business and transaction records.
• Improving our menu information and customer experience.
• Meeting applicable legal and accounting requirements.

We do not collect personal information for purposes unrelated to the services described in this policy without an appropriate legal basis.

Lawful Basis for Processing

Under UK data protection law, we process personal information only where an appropriate lawful basis applies.

• Contract: To receive, process and fulfil customer orders and related requests.
• Legal obligation: To maintain records and meet applicable statutory requirements.
• Legitimate interests: To maintain our website, manage customer communications and support the ordinary operation of our business, where these interests do not override your rights.
• Consent: Where consent is required, including certain optional cookies and marketing communications.

Online Orders and Payments

When placing an order through our website, customers may be asked to provide the information needed to complete the purchase and arrange fulfilment.

• Customer contact and order details are used to manage purchases.
• Payment transactions may be handled by authorised external payment service providers.
• Payment confirmations and transaction references may be retained for business records.
• Delivery or collection information is used only for the relevant fulfilment arrangements.

Full payment card details are not intended to be stored in our ordinary customer order records. Payment information is handled according to the arrangements and security practices of the relevant payment provider.

Cookies and Website Technologies

Our website may use cookies and similar technologies to support essential website functions and improve the browsing experience.

Essential Cookies

These support basic website operations, shopping basket functions, order sessions and customer preferences. They may be used where necessary to provide a service requested by the customer.

Preference Cookies

These may remember selected settings and improve the consistency of future visits.

Analytics and Optional Cookies

Where implemented, optional analytics or similar technologies are used only in accordance with applicable consent requirements. Customers can manage their preferences through the available cookie settings.

Session cookies generally expire when the browser session ends. Persistent cookie periods depend on the individual cookie and its purpose.

Sharing of Information

We do not sell or rent customer personal information. Information may be shared with appropriate service providers where this is necessary for our business operations.

• Website hosting and technical maintenance providers.
• Payment processing service providers.
• Delivery service providers where delivery is requested.
• Website and order management service providers.
• Professional advisers and relevant authorities where legally required.

Service providers are expected to handle information appropriately and only for the purposes for which it is shared.

We limit the information shared to what is reasonably necessary for the relevant service or legal requirement.

Data Storage and Retention

Personal information is retained only for as long as reasonably necessary to fulfil the purposes described in this policy or meet applicable legal obligations.

• Order and accounting records: Up to 6 years after the end of the relevant financial year, where required for accounting and statutory record-keeping.
• General customer enquiries: Up to 12 months after the enquiry has been resolved, unless a longer period is reasonably required.
• Delivery and fulfilment details: Up to 12 months after order completion, unless the information forms part of a required business record.
• Marketing preferences: Until consent is withdrawn or the relevant communication purpose ends.
• Technical website records: Up to 12 months, where retained for website security and maintenance purposes.

When information is no longer required, it will be securely deleted or anonymised where reasonably practicable, subject to any applicable retention obligations.

Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration or inappropriate disclosure.

These measures may include access restrictions, appropriate website security arrangements, secure service-provider systems and regular operational checks.

Access to customer information is limited to individuals and service providers who need it for relevant business purposes.

International Data Transfers

Some external service providers may process information using systems located outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be applied where required by applicable data protection law. These may include recognised adequacy arrangements or approved contractual safeguards.

Your Privacy Rights

Under applicable UK data protection legislation, you may have the following rights regarding your personal information:

• Right of access: Request a copy of personal information we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete information.
• Right to erasure: Request deletion of personal information where applicable.
• Right to restriction: Ask us to restrict certain processing activities.
• Right to data portability: Request eligible information in a commonly used electronic format.
• Right to object: Object to certain processing activities, including direct marketing.
• Right to withdraw consent: Withdraw consent where processing is based on consent.

We aim to respond to valid privacy requests within one calendar month of receiving the request and completing any necessary identity verification.

Where a request is complex or multiple requests are received, the response period may be extended by up to two additional months where permitted by law. We will explain any applicable extension within the initial one-month period.

Some requests may be subject to legal exceptions or applicable record-retention requirements.

Marketing Communications

We may provide information about our restaurant, menu updates and relevant services where an appropriate legal basis exists.

Where prior consent is required, marketing communications will only be sent after the relevant permission has been obtained.

Customers may opt out of marketing communications at any time by using the unsubscribe option provided in the message or contacting us directly.

We aim to process marketing opt-out requests within 5 working days.

Third-Party Websites

Our website may contain links to external websites or services that are operated independently of Claypot Lane.

These websites have their own privacy policies and information-handling practices. We encourage customers to review the relevant policies before providing personal information to external services.

We are not responsible for the privacy practices of independently operated third-party websites.

Children’s Information

Our website and online ordering services are intended for general customers. We do not knowingly request personal information from children for independent marketing purposes.

Where an order is placed on behalf of a household or family, the person submitting the order should ensure that the information provided is appropriate and necessary for the transaction.

Changes to This Policy

We may update this Privacy Policy when our website services, business operations or applicable legal requirements change.

The updated version will be published on this page and will take effect immediately upon publication.

Customers are encouraged to review this page periodically to remain informed about how their information is handled.

Complaints and Further Information

If you have concerns about how your personal information is handled, please contact us first so that we can review your enquiry.

You also have the right to raise a concern with the UK Information Commissioner’s Office (ICO), the independent authority responsible for data protection matters in the UK.

Website: ico.org.uk