How we handle information
Privacy policy.
This policy explains how Delicious Catering (2000) Limited uses personal information through the Delicious Catering website, its enquiry service and the Delicious Catering Order Management System (OMS).
Who we are
Delicious Catering (2000) Limited, company number 03917766, is the organisation responsible for the personal information we collect through this website and for the OMS processing we control. Our business address is Unit 2D, Gazelle Buildings, Wallingford Road, Uxbridge, London, UB8 2SX, United Kingdom.
If you have a privacy question or want to exercise a data protection right, contact us at info@delicious-catering.co.uk, call +44 1895 624 777, or use our contact page.
What this policy covers
It covers the public website, including the product and contact pages, and the staff-facing OMS when it is made available to an authorised user. It also explains the main service providers used to host, secure and operate those services.
When a business customer enters information about its own customers into the OMS, that business may be the data controller and Delicious Catering may process the information on its instructions. That business should provide its own privacy information where required. We will help route a request to the appropriate controller when necessary.
Personal information we collect
- Website enquiries: your name, email address, telephone number, business type, product interest and the message or other information you choose to send.
- Website security information: hosting and security providers may process technical information such as an IP address, browser or device details, timestamps and request information to deliver, secure and troubleshoot the website.
- OMS account information: an authorised user's name, business email address, role, account identifier, sign-in information and security or audit records.
- OMS business records: customer and sub-customer details, delivery points, product and pricing information, production dates, order quantities, references, notes, approval history and invoice status that staff enter or maintain for the business.
- QuickBooks information: when an authorised administrator connects QuickBooks Online, the OMS may receive customer, item, invoice, contact, address and QuickBooks identifier data needed for the approved synchronisation and invoice workflow.
- Information from other sources: we may receive business contact or order information from an organisation you work for, an authorised colleague, QuickBooks Online or another approved business channel.
The website does not ask for payment card details, QuickBooks passwords, client secrets or access and refresh tokens. Please do not put those credentials in an enquiry, order note or other OMS field.
How we use information and our lawful bases
- Responding to enquiries: to take steps at your request, respond to your message and decide whether to provide products or services. We rely on the steps you ask us to take and our legitimate interest in answering and managing business enquiries.
- Supplying and administering business services: to manage customer relationships, orders, product information, production work, invoice preparation and related support. We rely on a contract or steps at the request of a business customer, our legitimate interests in running the business, and legal obligations where applicable.
- Operating the OMS: to create accounts, apply role-based permissions, maintain audit trails, support staff and keep the service secure. We rely on our legitimate interests in operating a controlled business system, contractual arrangements with the relevant organisation and legal obligations where applicable.
- QuickBooks integration: to use the connection an authorised administrator asks us to establish, retrieve the data needed for the workflow, prepare invoices and carry out the action selected by authorised staff. We rely on the relevant business relationship and the administrator's authority to connect the organisation's QuickBooks account.
- Security, legal and operational purposes: to prevent misuse, investigate incidents, enforce our terms, keep records, respond to lawful requests and establish or defend legal claims. We rely on legitimate interests and applicable legal obligations.
- Marketing: the website is not a mailing-list sign-up. If we later use your information for direct marketing, we will do so only where permitted and will provide the required choice and opt-out information.
Who we share information with
We do not sell personal information. We share it only when needed for the purposes above, with appropriate safeguards and access controls, including with:
- our authorised employees and contractors who need it to answer enquiries, manage orders or operate the OMS;
- Cloudflare and other hosting, security and infrastructure providers that help deliver the website and OMS;
- Supabase, which provides authentication and database services for the OMS;
- Google services used by the website's contact-form relay, or Resend if the configured fallback email service is used;
- Intuit and QuickBooks Online when an authorised organisation connects its account and uses the integration;
- professional advisers, insurers, regulators, law enforcement or other recipients where disclosure is required or permitted by law; and
- a buyer or successor if the business or relevant assets are reorganised or transferred, subject to applicable confidentiality and data protection requirements.
Some service providers may process information outside the UK. Where an international transfer applies, we use an applicable adequacy decision or another lawful transfer mechanism and appropriate safeguards. You can contact us for more information about the safeguards relevant to a particular transfer.
Cookies and similar technologies
We do not use the website for advertising or behavioural tracking and we do not currently operate an analytics or marketing-cookie programme. The hosting and security infrastructure may use strictly necessary technologies or technical logs to deliver and protect the service. If that changes, we will update this policy and provide any choice required by law.
How long we keep information
We keep personal information only for as long as it is needed for the purpose for which it was collected, to maintain a business relationship, to meet tax, accounting or other legal obligations, or to establish and defend legal claims. In practice, enquiry information is kept while the enquiry is active and for a reasonable period afterwards; OMS order, invoice and audit records may be kept for the period required by the relevant business relationship and applicable accounting or legal requirements; and staff account and security records are limited after an account is closed unless a longer period is needed for security, dispute or legal reasons. Backups are replaced in line with the relevant provider's retention process.
Security
We use proportionate technical and organisational measures, including authenticated staff accounts, role-based access, restricted administrator actions, server-side handling of integration credentials, encrypted storage for QuickBooks refresh tokens, audit records and security monitoring. No website or online service can be guaranteed completely secure, so please tell us promptly if you believe an account or enquiry has been misused.
Your rights
Subject to applicable law and exemptions, you may have the right to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, objection to processing, and portability of information where that right applies. Where we rely on consent, you can withdraw it at any time; withdrawal does not affect processing already carried out lawfully.
To make a request, contact us using the details above. We may need information to verify your identity and, where the information belongs to a business customer, we may need to involve that organisation. We aim to respond within the time required by applicable data protection law.
Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK's Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.
Automated decisions
We do not use solely automated decision-making, including profiling, to make decisions about you that produce legal effects or similarly significant effects. The OMS may apply business rules such as permissions, pricing or invoice grouping, but authorised staff remain responsible for reviewing and approving operational actions.
Changes to this policy
We may update this policy when the website, OMS, service providers or legal requirements change. The current version will be published on this page with its latest update date. The OMS's use terms are set out in the End user license agreement.