Legal

Privacy Policy

Last updated: May 2025. We respect your privacy and are committed to protecting your personal data.

1. Who We Are

Anita's Home Kitchen is a home-based food business operated by Anita Adebayo, based in Carlisle, United Kingdom. We provide personal meal orders, catering services, canapes, sweet treats and event decoration services.

For the purposes of data protection law, we are the data controller of your personal information. You can contact us at:

2. Data We Collect

When you use our website or place an order, we may collect the following personal data:

  • Identity data: First name, last name
  • Contact data: Email address, phone number
  • Order data: Meal preferences, dietary requirements, event details, guest numbers
  • Transaction data: Payment details processed securely through our payment provider
  • Technical data: IP address, browser type, pages visited (collected automatically via cookies)
  • Communications: Messages you send us via contact forms, WhatsApp or email

We do not collect any special category personal data (such as race, health information or biometric data) unless you voluntarily share dietary or allergen information necessary to fulfil your order.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your meal orders or catering bookings
  • To communicate with you about your order, event or enquiry
  • To manage payments and send receipts or invoices
  • To provide allergen-safe food preparation based on your declared requirements
  • To improve our website and services through analytics
  • To comply with our legal and regulatory obligations

We will never use your data for purposes incompatible with those listed above, and we will never sell your personal data to third parties.

5. Sharing Your Data

We do not sell or share your personal data with third parties for marketing purposes. We may share your data with:

  • Payment processors: To securely process your payments (e.g. Stripe, Apple Pay)
  • IT and website service providers: Who host and maintain our website
  • Legal authorities: Where required by law or court order

All third parties we work with are required to handle your data securely and in accordance with data protection law.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting or reporting requirements. Typically:

  • Order and transaction records: 6 years (for tax and accounting purposes)
  • General enquiry communications: 12 months after your last contact
  • Marketing consent records: Until you withdraw consent

After these periods, your data will be securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right to access: Request a copy of the data we hold about you
  • Right to rectification: Ask us to correct inaccurate data
  • Right to erasure: Ask us to delete your data (subject to legal obligations)
  • Right to restrict processing: Ask us to limit how we use your data
  • Right to data portability: Receive your data in a machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us directly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies to improve your browsing experience and analyse site traffic. Cookies are small text files stored on your device. We use:

  • Essential cookies: Necessary for the website to function correctly
  • Analytics cookies: To understand how visitors use our site (anonymised data)

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. For more information, see our Cookies Policy.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch:

We aim to respond to all data-related requests within 30 days.

This policy was last reviewed and updated in May 2025. We may update it from time to time — please check back periodically.