Privacy Policy

We take your privacy seriously. This policy explains how we collect, use, and protect your personal data.

1. Who We Are

Chai and Crumbs Limited operates the website chaiandcrumbs.co.uk. We are an independent halal cafe based in Birmingham city centre, registered in England & Wales. Our registered address is 2, Waterfront Walk, City Centre, Birmingham B1 1SZ. For any privacy-related queries, you can contact us at info@chaiandcrumbs.co.uk or call 0121 665 6719. Chai and Crumbs Limited is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

Personal information

When you place an order, we collect your name, email address, and phone number to process and fulfil your order.

Payment details

Payments are processed securely by Square. We do not store your card details on our servers. Square handles all payment data in accordance with PCI DSS standards.

Browsing data

We collect information about how you interact with our website via cookies and similar technologies, including your IP address, browser type, device information, pages visited, and time spent on site.

Communication data

If you contact us by email, phone, or through our website contact form, we retain a record of that correspondence.

3. How We Use Your Data

Order fulfilment

To process, prepare, and deliver your orders, and to send you order confirmations and updates via email or SMS.

Customer service

To respond to your enquiries, complaints, and feedback.

Service improvement

To analyse how our website and services are used so that we can improve the customer experience.

Marketing

With your consent, to send you promotional emails about new menu items, offers, and events. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email.

Legal obligations

To comply with our legal and regulatory obligations, including tax and accounting requirements.

4. Cookies

Our website uses cookies and similar tracking technologies to improve your experience and to help us understand how our website is used. We use the following services:

Google Tag Manager

To manage and deploy marketing tags on our website without modifying the code.

Google Analytics

To collect anonymised data about website traffic, user behaviour, and demographics. This helps us understand which pages are most popular and how visitors navigate our site.

Facebook Pixel (Meta)

To measure the effectiveness of our advertising on Facebook and Instagram, and to serve relevant ads to people who have visited our website.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most web browsers allow you to control cookies through their settings preferences. To find out more about cookies, including how to see what cookies have been set, visit allaboutcookies.org.

5. Third-Party Services

We share your data with the following trusted third-party service providers who help us operate our business:

Square

Our payment processor. Square processes your payment details securely and in accordance with PCI DSS standards.

Brevo (formerly Sendinblue)

Our email marketing platform. If you opt in to marketing, your name and email address are shared with Brevo to send you promotional communications.

Google Analytics

Website analytics. Data collected is anonymised and used for statistical analysis only.

Facebook / Meta

Advertising and remarketing. Website browsing data may be shared with Meta for targeted advertising purposes.

Deliveroo, Just Eat, UberEats

Orders placed through these platforms are subject to their own privacy policies. We receive your name, delivery address, and order details to fulfil your order.

We do not sell your personal data to any third party. Data is only shared with the parties listed above for the specific purposes described.

6. Data Retention

Order data

We retain order records for 6 years in accordance with HMRC requirements for tax and accounting purposes.

Marketing data

We retain your marketing preferences and contact details until you unsubscribe from our mailing list. Upon unsubscription, your data is removed from our active marketing lists within 30 days.

Website analytics data

Anonymised analytics data is retained for 26 months in line with Google Analytics default settings.

Contact form data

Correspondence records are retained for 2 years unless a longer period is required for legal purposes.

7. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights in relation to your personal data:

Right of access

You have the right to request a copy of the personal data we hold about you.

Right to rectification

You have the right to request that we correct any inaccurate or incomplete personal data.

Right to erasure

You have the right to request that we delete your personal data, subject to any legal obligations we may have to retain it.

Right to data portability

You have the right to request a copy of your data in a structured, commonly used, and machine-readable format.

Right to object

You have the right to object to the processing of your personal data for direct marketing purposes.

Right to restrict processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at info@chaiandcrumbs.co.uk. We will respond to your request within one calendar month as required by law.

8. Contact the ICO

If you are unhappy with how we handle your personal data, or you believe that your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.

Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk

Last updated: April 2026