Privacy Policy

Website: https://goldencastle.uk

1. Who We Are

Golden Castle is a takeaway food business operating in the United Kingdom. We are committed to protecting your personal data and your privacy.

Contact Details:

• Company Name: Golden Castle
• Website: https://goldencastle.uk
• Email: info@goldencastle.uk
• Phone: 07556397230
• Address: 46-50 High St, Tunbridge Wells TN1 1XF, UK

For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Golden Castle.

2. Information We Collect

We collect and process the following types of personal data when you use our website and ordering services:

2.1 Personal Information You Provide

• Name: Your full name for order identification
• Contact Details: Email address and phone number for order confirmation and delivery updates
• Address: Delivery address for food delivery services
• Payment Information: Card details processed securely via third-party payment processors (we do not store full credit/debit card numbers)
• Order Information: Order history, food preferences, and special instructions
• Dietary Requirements: Allergen information and dietary preferences you provide when placing orders

2.2 Technical Information Automatically Collected

• IP Address: Your internet protocol address
• Browser Information: Browser type, version, and user agent string
• Device Information: Operating system and device type
• Usage Data: Pages visited, time spent on site, and clickstream data
• Location Data: Approximate location for delivery area verification (if enabled)

2.3 Special Category Data

• Allergen and Dietary Information: When you provide information about food allergies or dietary requirements, this is considered special category data under UK GDPR. We process this solely to ensure your safety and fulfil your order correctly.

3. How We Use Your Information

We use your personal data for the following purposes:

Purpose	Legal Basis
Processing and fulfilling your food orders	Contract performance
Sending order confirmations and delivery updates	Contract performance
Processing payments and preventing fraud	Legal obligation & Legitimate interest
Customer service and handling complaints	Contract performance
Sending marketing communications (with consent)	Consent
Complying with food safety and tax regulations	Legal obligation
Improving our website and services	Legitimate interest
Preventing spam and unauthorized access	Legitimate interest

4. Cookies

We use cookies to enhance your browsing and ordering experience. Please see our separate Cookie Policy for detailed information about the cookies we use.

Summary of Cookie Usage:

• Essential Cookies: Required for the ordering system to function (e.g., shopping cart, login sessions)
• Analytics Cookies: Help us understand how customers use our website
• Marketing Cookies: Used for advertising (only with your consent)

You can manage your cookie preferences through our cookie consent banner when you first visit our website.

5. Who We Share Your Data With

We may share your personal data with the following third parties:

5.1 Service Providers

• Payment Processors: Third-party payment services (e.g., Stripe, PayPal, Square) to process transactions securely
• Delivery Partners: Courier services or delivery drivers where applicable for food delivery
• IT Service Providers: Companies that host our website, manage our database, or provide technical support
• Email/SMS Providers: Services that send order confirmations and delivery notifications

5.2 Legal and Regulatory Bodies

• HMRC: For tax and accounting record keeping requirements
• Local Authority: For food safety and hygiene compliance
• Law Enforcement: If required by law or in response to valid legal requests

5.3 Professional Advisors

• Accountants and Lawyers: For professional advice and compliance purposes

We do not sell your personal data to third parties.

6. International Data Transfers

If we transfer your personal data outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO)
• Adequacy decisions by the UK government
• Other legally approved transfer mechanisms

7. How Long We Retain Your Data

We retain your personal data only for as long as necessary for the purposes outlined in this Privacy Policy:

Data Type	Retention Period	Reason
Order Records	7 years	HMRC tax and accounting requirements
Customer Account Data	Duration of account + 2 years	Service provision and re-engagement
Marketing Data	Until consent withdrawn	Marketing communications
Website Analytics	26 months	Website improvement
CCTV Footage (if applicable)	31 days	Security purposes
Correspondence/Complaints	3 years	Customer service and legal protection

After the retention period expires, your data will be securely deleted or anonymized.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

8.1 Right to Access

You can request a copy of the personal data we hold about you. We will respond within one month of your request.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure (“Right to be Forgotten”)

You can request deletion of your personal data under certain conditions, subject to legal retention requirements.

8.4 Right to Restrict Processing

You can request restriction of processing your personal data under certain conditions.

8.5 Right to Object to Processing

You can object to our processing of your personal data, particularly for direct marketing purposes.

8.6 Right to Data Portability

You can request transfer of your personal data to another organisation in a structured, commonly used format.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

To exercise these rights, please contact us:

• Email: info@goldencastle.uk
• Phone: 07556397230
• Post: 46-50 High St, Tunbridge Wells TN1 1XF, UK

We will respond to all legitimate requests within one month.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption: Secure socket layer (SSL) encryption for data transmission
• Access Controls: Restricted access to personal data on a need-to-know basis
• Secure Payment Processing: PCI-DSS compliant payment processors
• Regular Security Reviews: Ongoing assessment of security measures
• Staff Training: Data protection training for all employees

10. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

11. Children’s Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes by:

• Posting the updated policy on our website
• Updating the “Last Updated” date
• Sending email notification where appropriate

We encourage you to review this Privacy Policy periodically.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We encourage you to contact us first so we can address your concerns directly.

14. Contact Us

For any questions or requests regarding this Privacy Policy or our data practices, please contact us:

Contact Method	Details
Email	info@goldencastle.uk
Phone	07556397230
Post	Golden Castle, 46-50 High St, Tunbridge Wells TN1 1XF, UK
Website	https://goldencastle.uk

Last Updated: 20 March 2026