Legal

Privacy Policy

How we collect, use and protect your personal data, in line with UK GDPR and the Data Protection Act 2018. Last updated July 2026.

1. Data controller & processors

The data controller is Tamas Matyas Vezer, trading as Liz & Tom Street Food (sole trader), 2 Brunswick Road, Ipswich, IP4 4BL. For any privacy matter contact hello@lizandtomstreetfood.co.uk.

The website is designed, built and managed on our behalf by Venture CO Group, and is hosted by Rackhost Zrt. (Hungary, EU). Both act as our data processors under a written agreement and only process personal data on our documented instructions.

2. The data we collect

  • Order & contact data: your name, phone number, email address and (for delivery) your delivery address and any notes/access instructions.
  • Order details: the items you buy, amounts, fulfilment choice, requested time and order history.
  • Payment data: handled by Stripe. We receive confirmation of payment and a transaction reference — we never see or store your full card number.
  • Technical data: device/browser information, and — only with your consent — analytics data about how you use the site.
  • Communications: messages you send us by email, phone or WhatsApp.

3. How & why we use it (legal bases)

  • To perform our contract: take payment, prepare and deliver your order, and send order updates (received, confirmed, delivered).
  • Legitimate interests: to keep business and order records, prevent fraud and abuse, and improve our service (balanced against your rights).
  • Consent: optional analytics cookies and any marketing messages — you can withdraw consent at any time.
  • Legal obligation: to meet tax, accounting and food-safety record-keeping duties.

4. Who we share it with

We share data only as needed to run the business, with the following processors and recipients:

  • Venture CO Group — designs, builds and manages this website and its order system on our behalf.
  • Rackhost Zrt. (Hungary, EU) — hosts the website and stores order data on our behalf.
  • Stripe Payments UK Ltd — processes payments (see the Stripe Privacy Policy).
  • Our email/SMTP provider — delivers order confirmations and updates.
  • Our kitchen and delivery driver — receive your name, phone and delivery address so they can prepare and bring your order.

We may also share data with professional advisers or authorities where legally required. We do not sell your personal data.

5. International transfers

Some providers process data outside the UK — for example, our website and order data are hosted by Rackhost Zrt. in Hungary (EU), and Stripe operates internationally. Where personal data is transferred outside the UK we rely on appropriate safeguards, such as UK adequacy regulations (the EU/EEA benefits from a UK adequacy decision) or the International Data Transfer Agreement/Addendum.

6. How long we keep it

We keep order and transaction records for as long as needed to run the business and to meet legal and tax obligations (generally up to 6 years), after which we delete or anonymise them. Marketing consents are kept until you withdraw them.

7. Security

We use appropriate technical and organisational measures to protect your data, including encrypted payment handling via Stripe, access controls and secure hosting. No transmission over the internet is completely secure, but we take reasonable steps to protect information sent to us.

8. Your rights

Under UK data protection law you have the right to: be informed; access your data; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any right, email hello@lizandtomstreetfood.co.uk — we will respond within one month. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

9. Marketing

We will only send you marketing messages if you have opted in, and every message includes an easy way to opt out. We will never share your details with third parties for their own marketing.

10. Children

Our service is intended for adults. We do not knowingly collect data from children under 16 without appropriate consent.

11. Cookies

See our Cookie Policy for details of the cookies and local storage we use and how to manage them.

12. Changes

We may update this policy from time to time; the current version is always published here with its "last updated" date.

Tamas Matyas Vezer, trading as Liz & Tom Street Food · 2 Brunswick Road, Ipswich, IP4 4BL · hello@lizandtomstreetfood.co.uk