Privacy policy

1. Who we are

The data controller is The Willow Tree, Front Street, Barnby in the Willows, Newark, NG24 2SA, United Kingdom. You can contact us about this policy at hello@willowtreebarnby.co.uk or by phone on 01636 000000.

2. What personal data we collect

Depending on how you use the site, we may process:

• Website & device: technical data such as IP address, browser type, and pages viewed (via our hosting and infrastructure providers in their usual server logs).
• Online orders: name, phone number, email (if you provide it), delivery or collection details, order contents, payment confirmation references, and any notes you add to an order.
• Contact: information you send when you email or call us.
• Address lookup (optional): if you use Google address search on checkout, your typed query and chosen result are processed by Google under their terms — see our Cookie policy.

3. Why we use your data and lawful bases

• Contract — to take and fulfil food orders you place with us, including payment processing and contacting you about your order.
• Legitimate interests — to run our website securely, improve our service, respond to enquiries, and keep basic records for accounting and disputes.
• Consent — where we rely on consent (for example non-essential marketing if we add it later), we will ask clearly and you may withdraw consent at any time.
• Legal obligation — where the law requires us to retain or disclose information (for example tax or food-safety records).

4. Who we share data with

We share data only as needed to operate:

• Revolut (or other card providers we use) to process card payments. They act as a processor; their privacy notice applies to the payment step.
• Google when you use Maps / Places address lookup on our order page.
• Hosting & IT providers that host the site or support our systems, under appropriate terms.

We do not sell your personal data.

5. International transfers

Some processors may process data outside the UK. Where that happens, we rely on appropriate safeguards such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses, as required by UK law.

6. Retention

We keep order and payment-related records for as long as needed to fulfil your order, meet legal and accounting requirements, and handle complaints (typically a number of years for financial records). Marketing or optional data is kept only while relevant or until you withdraw consent.

7. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to erase data in certain circumstances.
• Restrict or object to processing in certain circumstances.
• Data portability, where applicable.
• Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise your rights, email hello@willowtreebarnby.co.uk. We may need to verify your identity before responding.

8. Security

We use appropriate technical and organisational measures to protect personal data. Card details are handled only by our payment provider on their secure pages; we do not store full card numbers on our servers.

9. Children

Our website and ordering are not aimed at children. If you believe we have collected a child's data in error, please contact us and we will delete it.

10. Changes to this policy

We may update this page from time to time. The "Last updated" line at the top will change when we do. Continued use of the site after changes means you accept the updated policy where the law allows.