1. Who We Are
Singh's Recipe Ltd (company number 15438494) is the data controller for personal data collected through our website at https://singhsrecipe.co.uk and through our other sales and communication channels.
Our registered address is Suite 4135, Unit 3A, 34–35 Hatton Garden, Holborn, London, EC1N 8DX. You can contact us regarding any data protection matter at singhsrecipeuk@outlook.com.
Singh's Recipe Ltd processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where required, we will register with the Information Commissioner's Office (ICO) and maintain an up-to-date registration.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity and contact data — your name, email address, telephone number, and delivery address, provided when you place an order, contact us, or sign up to our mailing list.
- Order and transaction data — details of products purchased, payment arrangements, and order history.
- Communication data — messages, enquiries, and correspondence sent to us via WhatsApp, email, or website contact forms.
- Marketing data — your preferences in respect of receiving marketing communications from us, and your engagement with our email marketing.
- Technical data — IP address, browser type, device information, and website usage data processed by Cloudflare for security and performance purposes.
- Analytics data — anonymised or aggregated data about how visitors interact with our Website, collected via Cloudflare analytics.
3. How We Use Your Data
| Purpose | Lawful Basis |
|---|---|
| Processing and fulfilling your orders | Contract (Article 6(1)(b)) |
| Managing and responding to your enquiries and complaints | Contract / Legitimate Interests (Article 6(1)(b)/(f)) |
| Sending transactional communications relating to your order | Contract (Article 6(1)(b)) |
| Sending you marketing emails about our products and services | Consent (Article 6(1)(a)) or, where soft opt-in applies, Legitimate Interests (Article 6(1)(f)) |
| Improving our Website and services using analytics data | Legitimate Interests (Article 6(1)(f)) |
| Complying with our legal and regulatory obligations | Legal Obligation (Article 6(1)(c)) |
| Maintaining records for tax and accounting purposes | Legal Obligation (Article 6(1)(c)) |
4. Email Marketing
Where you have signed up to receive marketing communications from us, we will send you emails about our products, promotions, and updates. We only send marketing emails where we have a valid basis to do so under both the UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR).
We rely on your express consent for email marketing in most circumstances. You can withdraw your consent at any time by clicking the unsubscribe link in any of our marketing emails or by contacting us at singhsrecipeuk@outlook.com.
Where permitted by PECR, we may contact existing customers about products or services similar to those they have previously purchased, provided that you were given a clear opportunity to opt out at the time of collection and have not opted out.
5. Third Parties We Share Data With
- Klaviyo Inc. — email marketing platform, based in the United States. Transfers are safeguarded via the UK-US Data Bridge. See Klaviyo's privacy notice.
- Cloudflare Inc. — website infrastructure, security, and analytics. See Cloudflare's privacy policy.
- WhatsApp (Meta Platforms Inc.) — direct customer communication. Messages are subject to Meta's own privacy policy. We receive and retain the content of communications for order and enquiry management.
We do not sell your personal data to any third party. We may disclose your personal data to regulatory authorities or law enforcement agencies where required by law.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Order and transaction data | Minimum 6 years from date of transaction |
| Customer communication records | 2 years from date of last communication |
| Marketing data | Until you unsubscribe or withdraw consent, then deleted or suppressed within 30 days |
| Website analytics data | As per Cloudflare's data retention settings (anonymised or aggregated) |
| Complaint records | 3 years from resolution |
7. Your Rights Under UK GDPR
Under UK GDPR, you have the following rights in respect of your personal data:
- Right of access — you may request a copy of the personal data we hold about you.
- Right to rectification — you may request that inaccurate or incomplete data is corrected.
- Right to erasure — you may request deletion of your personal data in certain circumstances.
- Right to restriction — you may request that we restrict our processing of your data in certain circumstances.
- Right to object — you may object to processing based on legitimate interests, including direct marketing.
- Right to data portability — where processing is based on consent or contract and carried out by automated means, you may request your data in a portable format.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at singhsrecipeuk@outlook.com. We will respond within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the ICO at https://ico.org.uk or by calling 0303 123 1113.
8. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or misuse. Where we become aware of a personal data breach, we will assess it without undue delay. We will notify the ICO within 72 hours where required, and notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms.
9. Cookies
We use cookies on our Website. Please see our Cookie Policy for full details of the cookies we use and how to manage your preferences.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be published on our Website with the date of last update. Where changes are material, we will make reasonable efforts to notify you.