Customer Privacy Notice
Last updated: 28 October 2026
1. Who we are
This privacy notice explains how your personal information is collected and used when you visit our website, use our app, create an account or place an order with us.
Business details
- Trading name: Kerry's Chippy
- Legal name: Kerry's Chippy a Partnership of Chris Law and Claire Law
- Address: 3 Pelham Street, Ilkeston, DE78AR
- Email: info@kerryschippy.online
- Telephone: 0115 944 5790
In this notice, "we", "us" and "our" refer to the business identified above.
Who is responsible for your information?
We are the data controller for personal information collected and used in connection with our customers, orders and business operations. This means we determine the purposes for which your information is processed.
Our website, apps and online ordering system are provided by our ordering provider.
Our ordering provider acts as our data processor for these services. It processes personal information on our behalf and in accordance with our documented instructions and applicable data protection law.
Our ordering provider provides the technology and operational services needed to deliver, manage, maintain and support our ordering system. It may make technical and operational decisions about how to provide these services, while we determine the purposes for which our customer information is used.
Our payment provider, Stripe, processes payments and may also act as an independent controller for certain activities, including payment security, fraud prevention and legal compliance, as explained in Stripe's privacy notice.
2. Information we collect
Depending on how you use our services, we may collect and process the following information:
| Category | Information |
|---|---|
| Contact details | Name, email address, telephone number, billing and delivery addresses, and the map location of your delivery address |
| Account details | Account identifiers, login information, saved addresses and preferences |
| Order information | Items ordered, order history, amounts spent, how you chose to receive your order and any table number, delivery instructions, notes and comments, refunds and cancellations, details you enter at checkout even if you don't complete the order, and photos or times recorded as proof of delivery |
| Payment information | Payment status, transaction references, payment method details made available by our payment provider, refunds and chargebacks |
| Loyalty and rewards | Points, vouchers, referrals, discounts, promotions and rewards used |
| Marketing preferences | Consent records, opt-outs, communication preferences and responses to campaigns |
| Technical information | IP address, device and browser information, session information, cookies, application usage, error and crash reports, and technical logs |
| Communications | Customer enquiries, reviews, feedback, complaints, messages and support requests |
| Security information | Relevant account activity, login attempts, transaction events and suspected misuse |
| Optional dietary information | Allergy or dietary information you include in an order, although we ask you not to (see section 6) |
We collect information directly from you, automatically when you use our services, and from relevant service providers involved in processing your order.
You normally need to provide sufficient contact and order information for us to accept and fulfil your order. Optional account features, saved preferences and marketing services do not generally need to be used to place an order.
3. How we use your information
We use personal information to operate our business, provide our services, communicate with customers and improve the customer experience.
Our purposes and lawful bases include:
| Purpose | Lawful basis |
|---|---|
| Taking, processing, preparing and delivering orders | Performance of our contract with you |
| Sending order confirmations and delivery updates | Contract |
| Managing customer accounts and account preferences | Contract or legitimate interests, as appropriate |
| Providing requested loyalty and rewards services | Contract or legitimate interests, as appropriate |
| Responding to enquiries, complaints and refund requests | Contract or legitimate interests |
| Preventing fraud, protecting accounts and investigating misuse | Legitimate interests in protecting our business and customers |
| Maintaining, securing and improving our website, apps and ordering services | Legitimate interests |
| Analysing sales, order patterns, customer activity and business performance | Legitimate interests |
| Providing relevant offers and personalising our own promotions | Legitimate interests or consent, as appropriate |
| Sending marketing about our products and services | Consent or legitimate interests, subject to electronic marketing rules |
| Requesting feedback and reviews | Legitimate interests, subject to applicable marketing rules |
| Maintaining tax, accounting and legally required records | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests or another applicable lawful basis |
| Showing reviews you choose to post, with your first name or display name | Legitimate interests |
Where we rely on your consent, you can withdraw it at any time.
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Our website and ordering provider
We use our ordering provider to provide and manage our website, apps, online ordering system and related technology services.
Our ordering provider processes customer information on our behalf and under our documented instructions.
These instructions cover the following activities where relevant to the services we use:
Website and ordering services
- Hosting, operating, maintaining and updating our website, apps and ordering system.
- Processing customer registrations, accounts, orders, payments, refunds, deliveries and collections.
- Managing menus, customer preferences, ordering history and account functionality.
- Providing loyalty schemes, rewards, discounts, referrals, vouchers and promotional functionality.
Communications and marketing
- Sending order confirmations, receipts, notifications and service communications.
- Preparing and delivering marketing campaigns, messages and promotional offers on our behalf.
- Managing customer marketing preferences, unsubscribe requests and communication records.
- Supporting customer segmentation, loyalty campaigns and customer retention activities that we authorise.
Analytics and business improvement
- Analysing sales, order frequency, product popularity, customer activity and business performance.
- Producing reports and insights to help us improve our business.
- Testing, troubleshooting and improving the functionality, reliability and performance of our ordering services.
- Preparing statistical reports and anonymised information for service analysis and improvement.
Operations, security and support
- Providing technical support, customer service assistance and account administration.
- Investigating order issues, failed payments, refunds, complaints and disputes on our behalf.
- Monitoring platform performance, security events and suspected misuse.
- Maintaining appropriate operational records, security logs, backups and recovery systems.
- Supporting the integrations, services and tools that we authorise.
- Assisting us in meeting our data protection obligations and responding to customer requests.
Our ordering provider may select appropriate technical systems, infrastructure, security measures and authorised sub-processors to carry out its responsibilities, subject to our agreement and applicable law.
Anonymous statistics and service improvement
We authorise our ordering provider to prepare anonymised statistical information from information processed through our ordering services, where appropriate and lawful.
Such information may include overall order volumes, popular products, ordering trends, service performance and demand patterns.
Once information has been effectively anonymised so that individuals are no longer identifiable, our ordering provider may use those anonymous results for benchmarking, research, service development, statistical analysis and commercial planning.
5. Marketing and promotions
We may contact you about our food, products, services, special offers, discounts, loyalty rewards and promotions.
We may use email, SMS, app notifications or other supported communication methods, where permitted by law.
We will send electronic marketing where:
- You have given appropriate consent; or
- You are an existing customer and the applicable legal conditions allow us to contact you about our own similar products or services, including providing an opportunity to opt out when we collect your details and in each subsequent marketing message.
You can opt out of marketing at any time by using the unsubscribe option in any message or by contacting us.
We may use information about your previous orders, preferences, loyalty activity and interactions with our services to make our offers more relevant, where legally permitted.
Marketing provided by our ordering provider
We may instruct our ordering provider to prepare, manage, automate and deliver our marketing campaigns and communications.
Our ordering provider acts as our data processor for these activities and processes customer information on our behalf.
6. Allergy and dietary information
Please do not enter allergy, intolerance or other health information in order notes, delivery instructions or other free-text fields.
If you or anyone you're ordering for has an allergy, intolerance or special dietary requirement, please contact us directly before placing your order.
Our online ordering system is not designed to collect health information. If you include such information despite this notice, it may be received by us and our ordering provider and stored as part of your order record. By choosing to include it, you consent to it being used only to handle that order.
Please do not rely on order notes to communicate allergies or other health requirements.
7. Payment security and fraud prevention
We use appropriate payment, transaction, account and technical information to help protect our business and customers from fraud, unauthorised transactions and misuse.
Card payments are processed through Stripe, which provides payment processing and fraud prevention services.
Stripe may conduct its own security and fraud checks in accordance with its responsibilities and privacy notice.
We may instruct our ordering provider to assist us with:
- Security monitoring and account protection.
- Investigating suspicious transactions.
- Resolving payment disputes and chargebacks.
- Detecting potential misuse of our ordering services.
- Maintaining security and incident records.
Our ordering provider carries out these activities on our behalf where acting as our processor.
8. Who we share information with
We may share relevant information with organisations that help us operate our business and provide our services.
These may include:
- Our ordering provider, which provides our website and ordering services.
- Hosting, infrastructure and security providers.
- Payment providers, including Stripe.
- Delivery drivers, delivery service providers, and mapping and address lookup providers that find and check your address.
- Email, SMS and other communication providers.
- Technical support and customer service providers.
- Analytics, reporting and error-monitoring providers.
- Till, point-of-sale, accounting and other business systems and integrations that we authorise, which may receive your order and contact details.
- AI and technology providers where relevant services are used, subject to appropriate safeguards.
- Professional advisers, insurers and legal representatives where necessary.
- Regulators, law enforcement authorities and other organisations where disclosure is legally required or justified.
- A buyer or successor if our business is sold or reorganised, where the transfer is lawful.
Our ordering provider may use authorised sub-processors to help deliver its services, subject to appropriate contractual and data protection requirements.
9. International data transfers
Some organisations involved in delivering our services may process or access personal information outside the United Kingdom.
Where applicable data protection law requires additional safeguards, we use appropriate legal transfer mechanisms.
These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or other legally permitted safeguards.
You can contact us for more information about international transfers relevant to your personal information.
10. How long we keep information
We keep personal information only for as long as we need it for the purposes in this notice, or as the law requires. How long depends on what the information is and why we hold it. For example:
- Order, payment and accounting records: generally six years, for tax, accounting and legal purposes.
- Account details, loyalty records and marketing preferences: while your account is active, and for a reasonable period after that.
- Technical, security and login information: for as long as needed to run and protect the ordering service.
We may keep information for longer where we need it to comply with the law, resolve disputes or establish, exercise or defend legal claims. When we no longer need it, we delete or anonymise it.
Our service providers retain information on our behalf in accordance with our instructions, our agreements with them and applicable law.
At the end of our relationship with a service provider, relevant personal information is handled under the applicable contractual and legal arrangements, including requirements concerning its return, deletion and any legally required retention. Our website provider may keep limited records of orders and payment disputes after we stop using its services, where it needs them for its own legal, tax or dispute obligations.
Information that has been effectively anonymised so that individuals can no longer be identified may be retained for statistical and analytical purposes.
11. Your data protection rights
Under applicable UK data protection law, you have rights concerning your personal information, subject to relevant conditions and exceptions.
These include the right to:
- Request a copy of your personal information.
- Ask for inaccurate information to be corrected.
- Request deletion of information in certain circumstances.
- Ask us to restrict certain processing.
- Object to processing based on legitimate interests.
- Object to direct marketing at any time.
- Request transfer of certain information in a commonly used electronic format.
- Withdraw consent where processing relies on consent.
- Exercise applicable rights relating to solely automated decisions that have legal or similarly significant effects.
These rights are not absolute. We may be permitted or required to retain certain information despite a request for deletion.
To exercise your rights, contact us using the details in section 1.
Requests are normally free of charge, although limited exceptions apply.
We may request information necessary to confirm your identity.
Data protection complaints
If you are concerned about how we have handled your information, you can complain to us using our contact details.
You also have the right to complain to the Information Commissioner's Office (ICO).
Website: https://ico.org.uk
Telephone: 0303 123 1113
12. Cookies and similar technologies
Our website and apps use cookies and similar technologies to support ordering, security, account access, customer preferences and service functionality.
These may include:
Essential technologies
Used to provide requested services, maintain sessions, remember basket contents, support account access and protect the website.
Analytics and performance technologies
Used to understand how our website and apps are used and to improve performance and functionality.
Where a legal exception applies, we may use limited statistical technologies without consent, provided we meet the applicable requirements, including giving you a simple way to object where required.
Marketing and advertising technologies
Used, where enabled, to measure and improve advertising.
You can manage your available choices through the cookie settings facility on our website.
Further information about individual technologies and their purposes is available through those settings or our cookie information.
13. Changes to this notice
We may update this privacy notice to reflect changes to our business, services, technology or applicable law.
The latest version will be published on our website with its last updated date.
14. Contact
For questions, privacy requests or complaints about your personal information, please contact:
Kerry's Chippy a Partnership of Chris Law and Claire Law
Trading as: Kerry's Chippy
Address: 3 Pelham Street, Ilkeston, DE78AR
Email: info@kerryschippy.online
Telephone: 0115 944 5790