Legal

Privacy Policy

Last updated: 24 July 2026

This policy explains how Dotch Flavour Foods Limited uses personal information in accordance with UK data-protection law.

2.1 Data controller

Dotch Flavour Foods Limited, trading as Dotch Flavour Foods, is the controller of personal information collected through the website and direct customer relationships. Registered office: 5 The Grazings, Hemel Hempstead, United Kingdom, HP2 5JN. Company number: 17246871. Privacy contact: hello@dotchflavourfoods.com.

2.2 Information we may collect

  • Identity and contact details, including name, email, telephone number, delivery address and billing address.
  • Account details, login information and preferences.
  • Order, payment-status, refund and transaction information. Full card details are handled by payment providers.
  • Catering and event-enquiry information, including event date, venue, guest numbers, budget, menu preferences and dietary information.
  • Allergy or dietary information you choose to provide. This may reveal health-related information and will be used only to respond to your request and support food safety.
  • Customer-service messages, complaints, reviews, testimonials and survey responses.
  • Marketing preferences and interaction with emails.
  • Website and device information, including IP address, browser, pages viewed and cookie identifiers.
  • Corporate, retailer, stockist and supplier contact information.
  • Photographs or video captured at events where appropriate notices or consent arrangements are in place.

2.3 How we collect information

We collect information directly from you when you order, create an account, submit a form, contact us, attend an event, join a mailing list or communicate through WhatsApp or social media. We may receive information from payment providers, couriers, event platforms, analytics providers and business partners. If an existing customer list is imported into an email platform, we will ensure that the intended use is lawful and transparent.

2.4 Why we use information and lawful bases

PurposeTypical informationLawful basis
Process orders, deliver products and manage accountsContact, address, order and transaction dataContract
Respond to catering, wholesale and corporate enquiriesContact and enquiry detailsPre-contract steps and legitimate interests
Food safety and dietary requestsAllergy/dietary information voluntarily providedExplicit consent where required; vital interests in an emergency; contract/legitimate interests as applicable
Customer service, complaints and refundsOrder and communication recordsContract, legal obligation and legitimate interests
Fraud prevention, accounting and legal complianceTransaction and technical dataLegal obligation and legitimate interests
Marketing to customers and subscribersContact details and marketing preferencesConsent or legitimate interests where permitted; electronic marketing rules apply
Website operation and analyticsDevice, usage and cookie dataConsent for non-essential cookies; legitimate interests for strictly necessary security and service operation
Events, testimonials and contentRegistration details, image/video or testimonialContract, legitimate interests or consent depending on use

2.5 Marketing

We may send product, menu, launch, experience and offer updates where you have consented or where permitted for existing customers. Every electronic marketing message will provide an unsubscribe method. Service messages about orders, deliveries, bookings and safety are not marketing and may still be sent where necessary.

2.6 Sharing information

We may share relevant information with service providers that help us operate, including website hosting and development providers, Stripe, PayPal, delivery couriers, email-marketing platforms, analytics and cookie providers, accountants, professional advisers, event-registration services and event suppliers. We require providers to protect information and use it only for authorised purposes. We may disclose information where required by law, regulators, insurers or law-enforcement authorities.

2.7 International transfers

Some service providers may process information outside the United Kingdom. Where this occurs, we will use an approved transfer mechanism or rely on another lawful safeguard.

2.8 Retention

We retain information only for as long as reasonably necessary. Indicative periods are: order and accounting records for up to seven years; customer-service and complaint records for up to six years after resolution; unsuccessful catering enquiries for up to two years; account data while the account remains active and for a reasonable period afterwards; and marketing data until consent is withdrawn or the contact is inactive under our retention process. These periods may change where law, insurance or a dispute requires longer retention.

2.9 Security

We use reasonable technical and organisational measures to protect personal information. No internet service is completely secure. Customers should use strong passwords and avoid sharing account credentials.

2.10 Your rights

To exercise a right, email hello@dotchflavourfoods.com. We may need to verify your identity. You may also contact the Information Commissioner's Office through its official website.

  • Ask for access to your personal information.
  • Ask us to correct inaccurate or incomplete information.
  • Ask us to erase information in certain circumstances.
  • Ask us to restrict processing in certain circumstances.
  • Object to processing based on legitimate interests or to direct marketing.
  • Ask for portability of information you supplied where applicable.
  • Withdraw consent at any time where processing relies on consent.
  • Complain to the Information Commissioner's Office.

2.11 Children

The website is not intended for children to make purchases independently. We do not knowingly collect personal information from children without appropriate authority.

2.12 Changes

We may update this policy to reflect changes in law, technology or our services. The latest version will appear on the website with an updated date.