Privacy Policy
Your Data Privacy | Transparent & Secure | WHIPPEDCO LTD
Last updated: April 2026 (Compliant with UK GDPR & Payment Processing Privacy Standards)
This Privacy Policy explains how WHIPPEDCO LTD (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website (whippedcoltd.shop), place an order, make a payment, or contact our team. We are a private limited company registered in England and Wales (Company No. 16577955) with a registered office at 61 Ernest Road, Hornchurch, England, RM11 3JN. Our nature of business is defined by SIC code 56103 (Take-away food shops and mobile food stands).
We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ensuring your personal data is handled securely, transparently, and only for legitimate purposes. This policy outlines your rights as a data subject and how you can exercise them.
What Personal Data We Collect
We only collect personal data that is necessary to provide our food delivery services, process payments, and communicate with you. The data we collect falls into the following categories:
- Order-Related Data: Your full name, delivery address, contact phone number, and email address. This information is required to prepare your order, deliver it to your location, and contact you if there are any issues with your order (e.g., delivery delays, item unavailability).
- Optional Data: If you contact us via our website form or email with questions, feedback, or complaints, we may collect additional information you choose to provide (e.g., order details, specific requests, or allergen concerns) to resolve your inquiry.
Payment Data: When you make a payment via our website, payments are processed securely by our trusted payment processor. We never access, store, or process your full card details, bank account information, or other sensitive payment data. All payment processing is handled directly by our payment processor, in compliance with strict privacy and data protection standards.
How We Use Your Personal Data
We use your personal data solely for legitimate business purposes, as permitted by UK GDPR. Our uses include:
- To process and fulfill your food orders (prepare, package, and deliver your food).
- To communicate with you about your order (e.g., order confirmation, delivery updates, issues or changes).
- To comply with legal and regulatory obligations (e.g., food safety regulations, tax and accounting requirements).
- To respond to your inquiries, feedback, or complaints, and improve our services based on your input.
To process payments securely via our trusted payment processor (we only receive confirmation of payment success/failure).
Who We Share Your Personal Data With
We take your privacy seriously and will never sell, rent, or share your personal data with third parties for marketing or commercial purposes. We only share your data with the following trusted parties, solely to provide our services:
- Delivery Drivers/Partners: We share your delivery address and contact phone number with our delivery team to ensure your order is delivered to the correct location. Drivers are required to keep this information confidential and only use it for delivery purposes.
- Legal/Regulatory Authorities: We may share your data if required by law, court order, or regulatory request (e.g., to comply with anti-money laundering regulations, food safety investigations, or other legal obligations).
Trusted Payment Processor: We share only the minimum necessary information (your name, email, and order amount) to process your payment securely. Our payment processor handles all sensitive payment data, and their privacy practices are compliant with global data protection standards and UK GDPR requirements, adhering to data minimisation principles by collecting only what is necessary for payment processing.
Data Security & Retention
Data Security: We implement appropriate organizational, technical, and administrative measures to protect your personal data from unauthorized access, loss, alteration, or misuse. This includes secure website hosting, encrypted communication, and restricted access to data within our team. For payment processing, we rely on our payment processor’s industry-leading security measures to protect your payment information, ensuring compliance with data protection best practices.
Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:
- Order and contact data is retained for 6 years to comply with UK tax and accounting obligations.
- Payment confirmation data (no sensitive payment details) is retained for 6 years in line with financial reporting requirements.
- After this period, your personal data will be securely deleted or anonymized so it can no longer be associated with you.
Your Data Rights Under UK GDPR
As a data subject, you have the following rights, which you can exercise at any time by contacting us:
- Right to access: Request a copy of the personal data we hold about you.
- Right to rectification: Ask us to correct any inaccurate or incomplete data we hold about you.
- Right to erasure: Request that we delete your personal data (where we have no legal obligation to retain it).
- Right to restriction: Ask us to restrict processing of your data (e.g., if you dispute its accuracy).
- Right to complain: If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
To exercise any of these rights, please contact us at hi@whippedco.co.uk with your full name, contact details, and a clear description of your request. We will respond to your request within 30 days.
WHIPPEDCO LTD | Company No. 16577955 | Registered Address: 61 Ernest Road, Hornchurch, England, RM11 3JN
Contact for Privacy Inquiries: hi@whippedco.co.uk | Phone: +44 7878 503661
This Privacy Policy is compliant with UK GDPR and strict payment processing privacy requirements, including data minimisation and secure data handling standards.