We take your privacy seriously. This policy explains how we collect, use, and protect your personal data.
Chai and Crumbs Limited operates the website chaiandcrumbs.co.uk. We are an independent halal cafe based in Birmingham city centre, registered in England & Wales. Our registered address is 2, Waterfront Walk, City Centre, Birmingham B1 1SZ. For any privacy-related queries, you can contact us at info@chaiandcrumbs.co.uk or call 0121 665 6719. Chai and Crumbs Limited is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Personal information
When you place an order, we collect your name, email address, and phone number to process and fulfil your order.
Payment details
Payments are processed securely by Square. We do not store your card details on our servers. Square handles all payment data in accordance with PCI DSS standards.
Browsing data
We collect information about how you interact with our website via cookies and similar technologies, including your IP address, browser type, device information, pages visited, and time spent on site.
Communication data
If you contact us by email, phone, or through our website contact form, we retain a record of that correspondence.
Order fulfilment
To process, prepare, and deliver your orders, and to send you order confirmations and updates via email or SMS.
Customer service
To respond to your enquiries, complaints, and feedback.
Service improvement
To analyse how our website and services are used so that we can improve the customer experience.
Marketing
With your consent, to send you promotional emails about new menu items, offers, and events. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email.
Legal obligations
To comply with our legal and regulatory obligations, including tax and accounting requirements.
Our website uses cookies and similar tracking technologies to improve your experience and to help us understand how our website is used. We use the following services:
Google Tag Manager
To manage and deploy marketing tags on our website without modifying the code.
Google Analytics
To collect anonymised data about website traffic, user behaviour, and demographics. This helps us understand which pages are most popular and how visitors navigate our site.
Facebook Pixel (Meta)
To measure the effectiveness of our advertising on Facebook and Instagram, and to serve relevant ads to people who have visited our website.
You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most web browsers allow you to control cookies through their settings preferences. To find out more about cookies, including how to see what cookies have been set, visit allaboutcookies.org.
We share your data with the following trusted third-party service providers who help us operate our business:
Square
Our payment processor. Square processes your payment details securely and in accordance with PCI DSS standards.
Brevo (formerly Sendinblue)
Our email marketing platform. If you opt in to marketing, your name and email address are shared with Brevo to send you promotional communications.
Google Analytics
Website analytics. Data collected is anonymised and used for statistical analysis only.
Facebook / Meta
Advertising and remarketing. Website browsing data may be shared with Meta for targeted advertising purposes.
Deliveroo, Just Eat, UberEats
Orders placed through these platforms are subject to their own privacy policies. We receive your name, delivery address, and order details to fulfil your order.
We do not sell your personal data to any third party. Data is only shared with the parties listed above for the specific purposes described.
Order data
We retain order records for 6 years in accordance with HMRC requirements for tax and accounting purposes.
Marketing data
We retain your marketing preferences and contact details until you unsubscribe from our mailing list. Upon unsubscription, your data is removed from our active marketing lists within 30 days.
Website analytics data
Anonymised analytics data is retained for 26 months in line with Google Analytics default settings.
Contact form data
Correspondence records are retained for 2 years unless a longer period is required for legal purposes.
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights in relation to your personal data:
Right of access
You have the right to request a copy of the personal data we hold about you.
Right to rectification
You have the right to request that we correct any inaccurate or incomplete personal data.
Right to erasure
You have the right to request that we delete your personal data, subject to any legal obligations we may have to retain it.
Right to data portability
You have the right to request a copy of your data in a structured, commonly used, and machine-readable format.
Right to object
You have the right to object to the processing of your personal data for direct marketing purposes.
Right to restrict processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
To exercise any of these rights, please contact us at info@chaiandcrumbs.co.uk. We will respond to your request within one calendar month as required by law.
If you are unhappy with how we handle your personal data, or you believe that your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.
Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk
Last updated: April 2026