Privacy Notice

Privacy Disclosures & Data Rights for Customers of Spice Bazaar (UK & EU GDPR)

1. Data Controller Information

Under the UK General Data Protection Regulation (UK GDPR) and EU GDPR, Spice Bazaar ("we", "our") is the Data Controller responsible for the customer personal data collected when you place an order on this storefront.

Business Name: Spice Bazaar

Operating Address: 48 Bristol Hill, Brislington, Bristol BS4 5AB, UK,

Email: info@spicebazaarbrislington.com

Phone: 01173291941

2. SaaS Infrastructure & Technical Processor

Technical data processing, database hosting, online cart persistence, and cloud infrastructure are provided by FoodTakeaway.co.uk acting strictly as the Data Processor on behalf of Spice Bazaar.

3. Information Collected & Purpose

To fulfill your order, we collect and process the following information under the legal basis of Contractual Performance:

Contact Details: Your name, phone number, and email address for order notifications and kitchen inquiries.
Fulfillment Data: Delivery address, pickup preference, table number (for dine-in), and food item choices.
Payment Confirmation: Payment status and transaction reference (processed securely via Stripe; full card numbers are never stored by us).

4. Authorized Sub-Processors

Your order data is shared exclusively with authorized third-party service providers required for fulfillment:

Stripe: Payment gateway processing.

Google Cloud / Firebase: Secure database, authentication, and push notification hosting.

Google Maps API: Address verification and delivery area geocoding.

5. Cookies & Storage Disclosures

This storefront uses essential cookies and local browser storage strictly necessary to provide the online ordering service, persist your shopping basket, and ensure payment security under the UK Privacy and Electronic Communications Regulations (PECR).

Storage Key	Classification	Purpose & Expiry
ft_cookie_consent	Strictly Necessary	Remembers your cookie banner preference choice (1 year).
FoodTakeaway Cart Storage	Strictly Necessary	Persists menu items, quantities, and selected add-ons in your order cart.
Firebase Auth & Checkout Draft	Strictly Necessary / Security	Maintains customer login state and prevents order loss during checkout.

6. Exercising Your Data Rights

You have the right to request access to your data, request corrections, or ask for your personal data to be deleted under GDPR. Please contact Spice Bazaar directly at info@spicebazaarbrislington.com or email privacy@foodtakeaway.co.uk for platform assistance.