Privacy Policy

This policy explains what personal data Mobz Kitchen collects, why we collect it, and the rights you have under the UK GDPR and the Data Protection Act 2018.

1. Who we are

Mobz Kitchen ("we", "us") is the data controller for the personal data described here. Registered business: [Registered company name], [registered address]. If we are registered with the Information Commissioner's Office (ICO), our registration number is [ICO number]. Contact us about privacy at [privacy@yourdomain].

2. The data we collect

• Account details — name, email address, password (stored hashed) and phone number.
• Order details — items ordered, delivery or collection address, order notes and order history.
• Payment information — processed by our payment provider; we do not store full card numbers on our servers.
• Communications — messages you send us and notification preferences.
• Technical data — limited data needed to run the site securely (see our Cookie Policy).

3. How we use it

To take and fulfil your orders, provide delivery or collection, run your rewards, keep your account secure, respond to enquiries, and — where you've agreed — send you updates. Our lawful bases are contract, legitimate interests, legal obligation and consent.

4. Sharing

We share data only with providers who help us operate — for example payment, delivery, email/SMS and hosting partners — under contracts that protect it. We do not sell your data.

5. Retention

We keep personal data only as long as needed for the purposes above and to meet legal and accounting obligations, then delete or anonymise it.

6. Your rights

You have the right to access, correct, delete, restrict or object to processing, and to data portability. To exercise any right, contact [privacy@yourdomain]. You can also complain to the ICO at ico.org.uk.

7. Changes

We'll update this policy as needed and change the "last updated" date above.