NastaKain Smunch Ltd — Privacy Policy

NastaKain Smunch Ltd (“we”, “us”, “our”) is committed to protecting your personal data. This policy explains what we collect, why, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information we collect

• Name, delivery address, email address and phone number, provided when you place an order
• Order history and preferences
• Payment is handled entirely by SumUp — we do not collect or store your card details

Why we collect it (legal basis)

• To fulfil and communicate about your order (performance of a contract)
• To keep accounting and tax records as required by HMRC (legal obligation)
• To respond to allergen or food safety queries relating to your order (legitimate interest)

How long we keep it

Order and transaction records are kept for 6 years in line with HMRC record-keeping requirements. Marketing consent, where given, is kept until you withdraw it.

Who we share it with

• SumUp, to process payment
• HMRC, where required for tax and accounting purposes
• We do not sell or share your data with third parties for marketing purposes

Cookies

Essential cookies required for checkout and site security are always on. Any additional analytics cookies are only used with your consent — see our Cookie Notice for details.

Your rights

Under UK GDPR you have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details on our Contact page.

You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been mishandled.

Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including relying on SumUp’s secure payment processing and 1-year SSL security on this website.