Privacy Policy

Name: miss chicken
Price range: £

Last updated: [Insert date]

This Privacy Policy explains how miss chicken collects, uses, stores and protects personal information when you visit our website, create an account, check delivery availability, place an order for delivery or collection, join our rewards programme, contact us or interact with our online services.

1. Who we are

Trading name: miss chicken
Business/legal name: [Insert registered business or proprietor name]
Business address: [Insert full Manchester business address and postcode]
Website: misschicken.co.uk
Email: [Insert privacy/contact email]
Telephone: [Insert UK telephone number]
Company number: [Insert if applicable]
ICO registration number: [Insert if applicable]

For the purposes of UK data protection law, [insert legal business name] is the data controller responsible for your personal information.

2. Information we collect

Depending on how you use our website and services, we may collect the following information.

Identity and contact information

Your first and last name
Mobile telephone number
Email address, where provided
Delivery or billing address
Postcode
Account details and customer ID

Order and transaction information

Products, meals, sauces, drinks and extras ordered
Delivery or collection preference
Delivery instructions
Order notes
Order history
Coupons, discounts and rewards activity
Payment status and transaction reference
Refund, cancellation and customer-service records

Account and verification information

Mobile number used to create or access an account
One-time passcode verification activity
Saved delivery addresses
Account preferences
Login and security records

Delivery and location information

Postcode entered to check delivery availability
Delivery address
Approximate location, where you choose to use location services
Delivery-radius eligibility
Collection or delivery preference

Allergy and dietary information

If you voluntarily provide an allergy, intolerance or health-related note, that information may reveal information about your health.

We use this information only to help review and fulfil your order and to communicate relevant information to the kitchen or order-handling team.

Please contact the restaurant directly before ordering if you have a serious allergy. An online allergy note does not replace direct communication with the restaurant.

Payment information

Payments may be processed by third-party payment providers such as Stripe.

We do not store your complete payment-card number, card security code or online banking credentials. We may receive limited payment information such as:

Payment method
Payment status
Transaction reference
Last digits of a payment card, where provided by the payment processor
Fraud or payment-verification results

Technical and usage information

We may collect:

IP address
Browser and device type
Operating system
Pages visited
Referring website
Basket and checkout activity
Date and time of visits
Cookie and consent preferences
Error, security and audit logs
Analytics events, where consent has been given

Marketing and communications information

We may record:

Whether you have opted in or out of marketing
Email or SMS preferences
Rewards registration
Responses to offers or campaigns
Messages and enquiries sent to us

3. How we use your information

We may use personal information to:

Process delivery and collection orders
Confirm and prepare your order
Check whether your postcode is within our delivery area
Contact you about an active order
Verify your mobile number
Process payments, refunds and cancellations
Maintain your customer account and order history
Provide Order Again and saved-address functions
Respond to questions, complaints or support requests
Manage coupons and miss chicken Rewards
Maintain website, payment and account security
Detect misuse, suspicious activity or fraud
Improve our menu, website and ordering experience
Measure website performance where analytics consent is given
Send marketing messages where you have opted in
Meet tax, accounting, legal and regulatory obligations
Establish, exercise or defend legal claims

4. Our lawful bases

We rely on the following lawful bases, depending on the purpose of processing:

Purpose	Lawful basis
Processing and fulfilling orders	Performance of a contract
Checking delivery availability	Performance of a contract or steps requested before entering a contract
Processing payments and refunds	Performance of a contract and legal obligations
Customer support and complaints	Contract and legitimate interests
Account management and order history	Contract and legitimate interests
Fraud prevention and website security	Legitimate interests and legal obligations
Financial, tax and accounting records	Legal obligation
Optional marketing messages	Consent
Non-essential analytics and marketing cookies	Consent
Rewards membership	Contract, consent or legitimate interests, depending on the feature
Allergy or health-related information	An Article 6 lawful basis and, where required, explicit consent or another valid Article 9 condition

Our legitimate interests include operating a secure and efficient ordering service, preventing fraud, resolving customer issues and improving our products and services. We will not rely on legitimate interests where your rights and freedoms override those interests.

5. Allergy and health-related information

Information about an allergy or medical condition may be treated as special-category personal data.

Where you choose to provide allergy or health-related information, we will:

Use it only for the specific order or customer-service purpose
Limit access to staff who need it
Avoid using it for marketing or profiling
Retain it only for as long as necessary
Apply additional care and security
Seek explicit consent where legally required

You are not required to provide health information through the website. Customers with serious allergies should contact us directly before ordering.

6. Cookies and similar technologies

Our website uses cookies and similar technologies.

Strictly necessary cookies

These are required for functions such as:

Keeping products in your basket
Maintaining login and checkout sessions
Processing secure payments
Remembering delivery or collection selection
Preventing fraud and protecting the website
Recording cookie preferences

These cookies may be used without optional consent where they are strictly necessary for the service requested.

Analytics and marketing cookies

Analytics, advertising and other non-essential technologies will only be activated where required consent has been obtained.

You can accept, reject or change your cookie preferences through our cookie banner or cookie settings.

Please see our separate Cookie Policy for more information.

7. Marketing communications

We will only send optional marketing emails or SMS messages where we have a lawful basis to do so.

Marketing consent:

Is separate from order and OTP communications
Is not required to place an order
Is not selected by default
Can be withdrawn at any time

Transactional messages about an order, payment, delivery, collection or account security are not marketing communications.

8. Who we share information with

We may share limited personal information with trusted service providers where necessary, including:

WordPress and WooCommerce service components
Our website-hosting provider
Payment providers such as Stripe
SMS or OTP providers, where enabled
Delivery or operational partners
Email and customer-communication providers
Analytics providers, where consent has been given
Security, backup and fraud-prevention providers
Accountants, insurers, legal advisers and professional consultants
Regulators, courts, law-enforcement agencies or public authorities where legally required

Service providers may only use personal information for the services they provide to us and must protect it appropriately.

We do not sell personal information to advertisers or data brokers.

9. International data transfers

Some technology providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will use appropriate safeguards where required, such as:

UK adequacy regulations
Approved contractual safeguards
The UK International Data Transfer Agreement
The UK Addendum to approved standard contractual clauses
Other legally recognised safeguards

10. How long we keep information

We retain personal information only for as long as necessary for the purpose for which it was collected.

Our retention approach includes:

Order and payment records: retained for the period required for accounting, tax, dispute-resolution and legal purposes
Customer-account information: retained while the account remains active and for a limited period afterwards
Allergy and order notes: retained only as necessary for order fulfilment, customer support and legal requirements
Marketing records: retained until consent is withdrawn, followed by a limited suppression record to respect the opt-out
Security and technical logs: retained for a limited period based on security and operational needs
Support enquiries: retained as necessary to manage the enquiry, complaint or dispute
Rewards data: retained while membership is active and for a limited period afterwards

We periodically review and delete or anonymise information that is no longer required.

11. How we protect your information

We use reasonable technical and organisational safeguards, which may include:

HTTPS and SSL encryption
Secure payment processing
Access controls and role-based permissions
Secure passwords and administrator protections
Backups and malware scanning
Input validation and security monitoring
Rate limiting and OTP protections
Audit and error logs
Supplier and processor security reviews

No online system can guarantee absolute security, but we take proportionate steps to protect customer information.

12. Your data-protection rights

Depending on the circumstances, you may have the right to:

Request access to your personal information
Request correction of inaccurate or incomplete information
Request deletion of your information
Request restriction of processing
Object to certain processing
Receive certain information in a portable format
Withdraw consent at any time
Object to direct marketing
Ask questions about how your information is used

Some rights are subject to legal limitations and may not apply in every situation.

To make a request, contact us using the details in Section 1. We may need to verify your identity before completing a request.

13. Automated decision-making

We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

We may use automated tools to support fraud detection, postcode validation, security monitoring or delivery eligibility, but material customer issues can be reviewed by a member of our team.

14. Children

Our online ordering service is not intended for children to create accounts or place orders without appropriate involvement from a parent or guardian.

We do not knowingly use children’s personal information for direct marketing.

15. Third-party websites

Our website may link to payment providers, map services, social-media platforms or other third-party websites.

Those organisations operate under their own privacy policies. We are not responsible for their privacy practices.

16. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, technology, suppliers or legal obligations.

The latest version will always be published on this page with an updated revision date.

17. Contact and complaints

For privacy questions or requests, contact:

miss chicken
Telephone: []

You also have the right to raise a concern with the Information Commissioner’s Office, the UK supervisory authority for data protection.

We would appreciate the opportunity to address your concern directly before you contact the ICO.

Important: This policy must be reviewed against the business’s actual data flows, processors, retention periods and consent mechanisms before publication.