PRIVACY POLICY

This Privacy Policy explains how Eve After Dark ("we", "us", "our") collects, uses, stores and protects your personal information when you visit theeveafterdark.co.uk ("the website") or place a food order with us. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, Eve After Dark is the data controller of the personal information you provide.

1. Information We Collect

We only collect the information we need to take and fulfil your order and to operate our website. This includes:

• Contact details — your name, phone number and email address.
• Delivery information — your delivery address and any access notes you provide.
• Order details — the items you order, quantities, special requests and any allergy or dietary notes.
• Communications — messages you send us via WhatsApp, our contact form, email or phone.
• Technical data — your IP address, browser type, device information and pages visited, collected automatically through cookies and analytics.

Card payments on this website are handled directly by our payment processor, Stripe (see Section 6). Your card details are entered on Stripe's secure payment page and are never stored on our servers.

2. How We Use Your Information

We use your personal information to:

• Receive, confirm, prepare and deliver your food orders;
• Contact you about your order by email, phone or WhatsApp, including sending your order confirmation and delivery tracking link;
• Respond to your enquiries, feedback and complaints;
• Process refunds where applicable under our Refund & Cancellation Policy;
• Operate, maintain and improve our website and services;
• Send you promotional offers and news — only where you have opted in;
• Meet our legal, tax and food-safety obligations.

We rely on the following lawful bases under UK GDPR:

• Contract — to take and fulfil the order you place with us.
• Consent — for non-essential cookies and for marketing emails you have opted into.
• Legitimate interests — to operate, secure and improve our business and website.
• Legal obligation — to comply with accounting, tax and food-safety requirements.

3. Cookies

Our website uses cookies and similar technologies to function correctly, remember your preferences and understand how the site is used. We manage cookie consent through Cookiebot, which lets you accept or reject categories of cookies and withdraw your consent at any time. For full details, please read our Cookie Policy.

4. Analytics

We use Google Analytics to understand how visitors use our website so we can improve it. Analytics cookies only run where you have given consent. The data we receive is aggregated and statistical and helps us see things such as which pages are most popular and how people find us.

We may use Facebook Pixel in the future to measure the effectiveness of advertising and to show relevant offers. If and when we do, it will only operate with your consent and we will update this policy and our Cookie Policy accordingly.

5. WhatsApp Enquiries

For bulk and catering enquiries, and general questions, you can message us on WhatsApp. When you do, your phone number, name and the details you send are shared with us through the WhatsApp platform so we can respond and arrange your order. WhatsApp is operated by Meta Platforms, Inc. and your use of it is also governed by WhatsApp's own Privacy Policy. We only use the information you send us through WhatsApp to handle your order and respond to your messages.

6. Payment Processing

Online card payments are processed by Stripe Payments Europe Ltd, a PCI-DSS compliant payment provider. Your card details are entered and processed directly by Stripe and are not stored on our servers. We only receive confirmation of payment and limited information (such as the amount and the last four digits of your card) needed to manage your order and any refunds. Stripe's handling of your data is described in Stripe's Privacy Policy.

7. Who We Share Your Information With

We never sell your personal data. We only share it with trusted third parties who help us run our business, including:

• MealShift, our delivery partner, who receive your name, phone number, delivery address and any delivery notes so their driver can bring your order to you;
• Stripe, for card payment processing;
• WhatsApp / Meta, for enquiries you choose to send us there;
• Google, for Maps, Fonts and Analytics services;
• Cookiebot, for managing cookie consent;
• Professional advisers and authorities, where we are legally required to do so.

8. Your Rights Under UK GDPR

You have the right to:

• Be informed about how your data is used (this policy);
• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten") where applicable;
• Restrict or object to how we process your data;
• Data portability — to receive your data in a reusable format;
• Withdraw consent at any time, including for marketing and cookies.

To exercise any of these rights, contact us at hello@eveafterdark.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Retention

We keep your personal data only for as long as necessary. Order and transaction records are typically kept for up to six years to meet UK accounting and tax requirements. Enquiry and contact messages are kept only as long as needed to deal with your request. Marketing data is kept until you unsubscribe. When data is no longer needed, we securely delete or anonymise it.

10. Security

We take appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. Our website uses encrypted (HTTPS) connections, and payment data is handled by PCI-DSS compliant providers. While no method of transmission over the internet is completely secure, we work hard to safeguard your data.

11. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services or the law. Any updates will be posted on this page with a revised "last updated" date. We encourage you to review this page periodically.