Legal
Privacy Policy
Last updated: 24 July 2026
This policy explains how Dotch Flavour Foods Limited uses personal information in accordance with UK data-protection law.
2.1 Data controller
Dotch Flavour Foods Limited, trading as Dotch Flavour Foods, is the controller of personal information collected through the website and direct customer relationships. Registered office: 5 The Grazings, Hemel Hempstead, United Kingdom, HP2 5JN. Company number: 17246871. Privacy contact: hello@dotchflavourfoods.com.
2.2 Information we may collect
- Identity and contact details, including name, email, telephone number, delivery address and billing address.
- Account details, login information and preferences.
- Order, payment-status, refund and transaction information. Full card details are handled by payment providers.
- Catering and event-enquiry information, including event date, venue, guest numbers, budget, menu preferences and dietary information.
- Allergy or dietary information you choose to provide. This may reveal health-related information and will be used only to respond to your request and support food safety.
- Customer-service messages, complaints, reviews, testimonials and survey responses.
- Marketing preferences and interaction with emails.
- Website and device information, including IP address, browser, pages viewed and cookie identifiers.
- Corporate, retailer, stockist and supplier contact information.
- Photographs or video captured at events where appropriate notices or consent arrangements are in place.
2.3 How we collect information
We collect information directly from you when you order, create an account, submit a form, contact us, attend an event, join a mailing list or communicate through WhatsApp or social media. We may receive information from payment providers, couriers, event platforms, analytics providers and business partners. If an existing customer list is imported into an email platform, we will ensure that the intended use is lawful and transparent.
2.4 Why we use information and lawful bases
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Process orders, deliver products and manage accounts | Contact, address, order and transaction data | Contract |
| Respond to catering, wholesale and corporate enquiries | Contact and enquiry details | Pre-contract steps and legitimate interests |
| Food safety and dietary requests | Allergy/dietary information voluntarily provided | Explicit consent where required; vital interests in an emergency; contract/legitimate interests as applicable |
| Customer service, complaints and refunds | Order and communication records | Contract, legal obligation and legitimate interests |
| Fraud prevention, accounting and legal compliance | Transaction and technical data | Legal obligation and legitimate interests |
| Marketing to customers and subscribers | Contact details and marketing preferences | Consent or legitimate interests where permitted; electronic marketing rules apply |
| Website operation and analytics | Device, usage and cookie data | Consent for non-essential cookies; legitimate interests for strictly necessary security and service operation |
| Events, testimonials and content | Registration details, image/video or testimonial | Contract, legitimate interests or consent depending on use |
2.5 Marketing
We may send product, menu, launch, experience and offer updates where you have consented or where permitted for existing customers. Every electronic marketing message will provide an unsubscribe method. Service messages about orders, deliveries, bookings and safety are not marketing and may still be sent where necessary.
2.6 Sharing information
We may share relevant information with service providers that help us operate, including website hosting and development providers, Stripe, PayPal, delivery couriers, email-marketing platforms, analytics and cookie providers, accountants, professional advisers, event-registration services and event suppliers. We require providers to protect information and use it only for authorised purposes. We may disclose information where required by law, regulators, insurers or law-enforcement authorities.
2.7 International transfers
Some service providers may process information outside the United Kingdom. Where this occurs, we will use an approved transfer mechanism or rely on another lawful safeguard.
2.8 Retention
We retain information only for as long as reasonably necessary. Indicative periods are: order and accounting records for up to seven years; customer-service and complaint records for up to six years after resolution; unsuccessful catering enquiries for up to two years; account data while the account remains active and for a reasonable period afterwards; and marketing data until consent is withdrawn or the contact is inactive under our retention process. These periods may change where law, insurance or a dispute requires longer retention.
2.9 Security
We use reasonable technical and organisational measures to protect personal information. No internet service is completely secure. Customers should use strong passwords and avoid sharing account credentials.
2.10 Your rights
To exercise a right, email hello@dotchflavourfoods.com. We may need to verify your identity. You may also contact the Information Commissioner's Office through its official website.
- Ask for access to your personal information.
- Ask us to correct inaccurate or incomplete information.
- Ask us to erase information in certain circumstances.
- Ask us to restrict processing in certain circumstances.
- Object to processing based on legitimate interests or to direct marketing.
- Ask for portability of information you supplied where applicable.
- Withdraw consent at any time where processing relies on consent.
- Complain to the Information Commissioner's Office.
2.11 Children
The website is not intended for children to make purchases independently. We do not knowingly collect personal information from children without appropriate authority.
2.12 Changes
We may update this policy to reflect changes in law, technology or our services. The latest version will appear on the website with an updated date.
