Legal
Privacy policy.
What we collect, why, how long we keep it and how to ask us about it.
What we collect
When you use the order form we collect your name, phone number, email address and postcode, what it is, when, a date if you give one, and your order and notes. The form also records the time it was sent and your IP address, used only to block automated submissions.
For office and catering orders we keep the delivery address, the names on the bags if you give them, any allergy you tell us about, and invoices for regular customers.
Why we use it
- To make and deliver your order (our contract with you).
- To make food safely around an allergy you tell us about (your consent).
- To keep accounting records and invoices (a legal obligation).
How long we keep it
One-off orders are deleted after three months. Regular office accounts are kept while you order and for two years after; accounting records for six.
Your rights
You can ask for a copy of what we hold, ask us to correct or delete it, object to our using it or withdraw consent. Email orders@crust-and-filling.co.uk. We answer within a month. You can complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
This website sets a session cookie only when you send the order form, to limit repeat submissions. The sandwich builder and the office cut-off are worked out on the server and store nothing. There are no analytics or advertising cookies. The map on the find-us page is loaded from Google, which may set its own cookies.