PRIVACY POLICY

This Privacy Policy explains how Eve After Dark ("we", "us", "our") collects, uses, stores and protects your personal information when you visit theeveafterdark.co.uk ("the website") or place a food order with us. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, Eve After Dark is the data controller of the personal information you provide.

1. Information We Collect

We only collect the information we need to take and fulfil your order and to operate our website. This includes:

• Contact details — your name and phone number.
• Delivery information — your delivery address and any access notes you provide.
• Order details — the items you order, quantities, special requests and any allergy or dietary notes.
• Communications — messages you send us via WhatsApp, our contact form, email or phone.
• Technical data — your IP address, browser type, device information and pages visited, collected automatically through cookies and analytics.

We do not currently take card payments on this website. When we introduce online card payments in the future, payment card details will be handled directly by our payment processor (see Section 6) and will not be stored by us.

2. How We Use Your Information

We use your personal information to:

• Receive, confirm, prepare and deliver your food orders;
• Contact you about your order, including confirming details via WhatsApp;
• Respond to your enquiries, feedback and complaints;
• Process refunds where applicable under our Refund & Cancellation Policy;
• Operate, maintain and improve our website and services;
• Send you promotional offers and news — only where you have opted in;
• Meet our legal, tax and food-safety obligations.

We rely on the following lawful bases under UK GDPR:

• Contract — to take and fulfil the order you place with us.
• Consent — for non-essential cookies and for marketing emails you have opted into.
• Legitimate interests — to operate, secure and improve our business and website.
• Legal obligation — to comply with accounting, tax and food-safety requirements.

3. Cookies

Our website uses cookies and similar technologies to function correctly, remember your preferences and understand how the site is used. We manage cookie consent through Cookiebot, which lets you accept or reject categories of cookies and withdraw your consent at any time. For full details, please read our Cookie Policy.

4. Analytics

We use Google Analytics to understand how visitors use our website so we can improve it. Analytics cookies only run where you have given consent. The data we receive is aggregated and statistical and helps us see things such as which pages are most popular and how people find us.

We may use Facebook Pixel in the future to measure the effectiveness of advertising and to show relevant offers. If and when we do, it will only operate with your consent and we will update this policy and our Cookie Policy accordingly.

5. WhatsApp Ordering

To confirm your order, we redirect you to WhatsApp. When you message us there, your phone number, name and the order details you send are shared with us through the WhatsApp platform so we can confirm and arrange your order. WhatsApp is operated by Meta Platforms, Inc. and your use of it is also governed by WhatsApp's own Privacy Policy. We only use the information you send us through WhatsApp to handle your order and respond to your messages.

6. Payment Processing

At present, payment is arranged directly with us. We plan to introduce secure online card payments in the future. When this goes live, your card details will be entered and processed directly by a PCI-DSS compliant payment provider and will not be stored on our servers. We will only receive confirmation of payment and limited information (such as the amount and the last four digits of your card) needed to manage your order and any refunds. We will update this policy with the details of our chosen payment provider before any online payments go live.

7. Who We Share Your Information With

We never sell your personal data. We only share it with trusted third parties who help us run our business, including:

• Delivery drivers or couriers, so your order can reach you;
• WhatsApp / Meta, for order confirmation messaging;
• A secure payment provider, for payment processing (once introduced);
• Google, for Maps, Fonts and Analytics services;
• Cookiebot, for managing cookie consent;
• Professional advisers and authorities, where we are legally required to do so.

8. Your Rights Under UK GDPR

You have the right to:

• Be informed about how your data is used (this policy);
• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten") where applicable;
• Restrict or object to how we process your data;
• Data portability — to receive your data in a reusable format;
• Withdraw consent at any time, including for marketing and cookies.

To exercise any of these rights, contact us at hello@eveafterdark.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Retention

We keep your personal data only for as long as necessary. Order and transaction records are typically kept for up to six years to meet UK accounting and tax requirements. Enquiry and contact messages are kept only as long as needed to deal with your request. Marketing data is kept until you unsubscribe. When data is no longer needed, we securely delete or anonymise it.

10. Security

We take appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. Our website uses encrypted (HTTPS) connections, and payment data is handled by PCI-DSS compliant providers. While no method of transmission over the internet is completely secure, we work hard to safeguard your data.

11. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services or the law. Any updates will be posted on this page with a revised "last updated" date. We encourage you to review this page periodically.