PRIVACY POLICY

2. What Information We Collect

We may collect and process the following types of personal data:

Information you provide directly

• Name
• Email address
• Telephone number
• Event details (date, location, guest numbers, requirements)
• Any other information you submit via forms, email, or enquiry

Information collected automatically

• IP address
• Browser type and device
• Pages visited and time spent on site
• Referral source

Transaction and service data

• Details of services requested or purchased
• Payment and billing information (processed securely via third-party providers)

3. How We Use Your Information

We use your personal data to:

• Respond to enquiries and provide quotes
• Deliver our catering and event services
• Manage bookings, invoices, and payments
• Communicate important service updates
• Improve our website and customer experience
• Comply with legal and regulatory obligations

Marketing

Where permitted, we may send occasional marketing communications. You can opt out at any time.

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Contractual necessity — to provide services you request
• Legitimate interests — to operate and improve our business
• Legal obligations — for tax, accounting, and compliance
• Consent — where required (e.g. marketing)

5. Sharing Your Information

We may share your data with trusted third parties, including:

• Payment providers
• Website and hosting providers
• CRM and automation tools (e.g. booking or workflow systems)
• Accountants and professional advisors

All third parties are required to handle your data securely and in line with data protection laws.

We may also disclose data where required by law or to protect our legal rights.

6. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Secure servers and hosting
• Access controls
• Encrypted communications where applicable

However, no system is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal data only as long as necessary:

• Enquiries (not converted to bookings): up to 24 months
• Customer and transaction data: up to 6 years (for legal/accounting purposes)

We regularly review and securely delete data that is no longer required.

8. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent (where applicable)

To exercise any of these rights, contact us at:
📧 jason@rollmeup.co.uk

9. Cookies and Tracking

Our website may use cookies and similar technologies to:

• Improve functionality and performance
• Analyse user behaviour
• Support marketing activities

You can control cookie preferences through your browser settings.

10. Third-Party Websites

Our website may contain links to other websites. We are not responsible for the privacy practices of those websites.

11. Complaints

If you are unhappy with how we handle your data, please contact us first so we can resolve the issue.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
📞 0303 123 1113
🌐 https://www.ico.org.uk

12. Updates to This Policy

We may update this policy from time to time. Any changes will be posted on this page.