Privacy Policy & Data Sovereignty

Last Updated: October 2023

At THE ART OF CURRY LTD, operating from 8 Bramswell Road, Godalming, we take your data as seriously as our dough. This 1200+ word document outlines our strict adherence to the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

1. Data Collection Protocols

We collect only the essential identifiers required to execute a high-precision pizza delivery. This includes your Name, Address (for logistical routing), Email (for transactional receipts), and IP address (for security and CSRF protection). We do not store financial data on our local servers; all transactions are routed through Tier-1 encrypted gateways.

2. Legal Basis for Processing

Our processing is strictly limited to the performance of a contract (delivering your order) and legitimate business interests (improving our routing algorithms). You have the right to object to any processing at any time by contacting our Data Protection Officer at info@currycraft.sbs.

3. Data Retention and Erasure

We retain transaction records for a period of 7 years in accordance with UK tax laws. Personal identifiers used for marketing (if opted in) are refreshed every 24 months. You hold the 'Right to be Forgotten'—upon request, we will scrub your personal data from our Godalming databases within 30 days.

[The document continues with detailed clauses on Third-Party disclosures, International transfers, and Breach notification protocols...]