Privacy Policy
Piri Piri Express – Privacy Policy
Last updated: 27/11/2025
Piri Piri Express (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, join our loyalty schemes, or interact with our services.
By using our website or placing an order, you agree to the terms outlined in this Privacy Policy.
1. Information We Collect
We collect the following types of personal data:
1.1 Information you provide to us
- Name
- Email address
- Phone number
- Delivery address & postcode
- Billing address
- Order history (items purchased, dates, amounts)
- Payment method (processed securely via third-party providers; we do not store card details)
- Account information (if you choose to create an account)
- Messages sent to us directly (email, website forms, social media)
1.2 Information collected automatically
- IP address
- Browser type & device information
- Cookies and tracking data (see Cookie section)
- Analytics data (page views, time on site, etc.)
2. How We Use Your Personal Data
We use your personal information to:
- Process and deliver your food orders
- Communicate with you about your order status
- Manage your account (if applicable)
- Provide customer support
- Improve our services, website, and menu offerings
- Prevent fraud or unauthorised activity
- Comply with legal obligations (e.g., tax and accounting rules)
3. Email Marketing & Soft Opt-In
Under the UK Privacy and Electronic Communications Regulations (PECR), we may send marketing emails to you under the soft opt-in rule if:
- You purchased from us or provided your email during an order or checkout process
- We are marketing our own similar products and offers
- You were given the opportunity to opt out at the time
- Every marketing email contains an easy unsubscribe link
You may unsubscribe from marketing emails at any time by clicking the link at the bottom of the email.
If you opt out, we will stop sending marketing messages immediately.
4. How We Share Your Information
We only share your personal data when it is necessary to run our business.
We may share your information with:
4.1 Delivery partners
To fulfil delivery orders (e.g., Uber Eats, Just Eat, Stuart, or direct couriers).
Shared data: name, address, contact number, and order details.
4.2 Payment processors
For secure payment handling.
We do not store card information.
Examples: Stripe, PayPal, Apple Pay, Google Pay.
4.3 Service providers
These help us operate our website and email systems:
- Website hosting
- Email delivery systems
- Order management tools
- Analytics tools
4.4 Legal requirements
If required by law, regulation, or to protect our rights or the rights of others.
We do not sell, rent, or trade your personal information to third parties.
5. Cookies & Tracking Technologies
Cookies help us improve your experience on our website.
We use cookies for:
- Essential website functions (checkout, cart, login)
- Analytics and performance
- Remembering your preferences
- Security and fraud prevention
You can control cookies through your browser settings.
Disabling essential cookies may affect website functionality.
6. Data Retention
We keep your personal data for as long as necessary for the purposes described in this Privacy Policy, including:
- Order data: up to 7 years (required for accounting and tax laws)
- Marketing data: until you unsubscribe
- Account data: until your account is deleted
- Analytics data: typically 12–36 months
When data is no longer needed, we securely delete or anonymise it.
7. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your personal data (where legally allowed)
- Object to or restrict processing
- Opt out of marketing at any time
- Request a copy of your data in a portable format
- Withdraw consent (where consent was required)
To exercise your rights, contact us at the email below.
8. Protecting Your Data
We take data security seriously and use appropriate measures such as:
- SSL secure encryption
- Firewalls
- Secure hosting
- Limited access to personal data
- Staff training
- Regular security reviews
While no system is completely secure, we work hard to protect your information from unauthorised access, loss, or misuse.
9. International Transfers
Some of our service providers may process data outside the UK.
When this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, secure processors like Google or Stripe).
10. Changes to This Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated “Last updated” date.
11. Contact Us
For questions about this Privacy Policy or to exercise your rights:
Piri Piri Express
Email: [your contact email]
Website: [your domain]
Who we are
Our website address is: http://lafka.althemist.com.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Who we share your data with
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Your contact information
Additional information
How we protect your data
What data breach procedures we have in place
What third parties we receive data from
What automated decision making and/or profiling we do with user data
Industry regulatory disclosure requirements
Piri Piri Express – Privacy Policy
Last updated: {{enter date}}
Piri Piri Express (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, join our loyalty schemes, or interact with our services.
By using our website or placing an order, you agree to the terms outlined in this Privacy Policy.
1. Information We Collect
We collect the following types of personal data:
1.1 Information you provide to us
- Name
- Email address
- Phone number
- Delivery address & postcode
- Billing address
- Order history (items purchased, dates, amounts)
- Payment method (processed securely via third-party providers; we do not store card details)
- Account information (if you choose to create an account)
- Messages sent to us directly (email, website forms, social media)
1.2 Information collected automatically
- IP address
- Browser type & device information
- Cookies and tracking data (see Cookie section)
- Analytics data (page views, time on site, etc.)
2. How We Use Your Personal Data
We use your personal information to:
- Process and deliver your food orders
- Communicate with you about your order status
- Manage your account (if applicable)
- Provide customer support
- Improve our services, website, and menu offerings
- Prevent fraud or unauthorised activity
- Comply with legal obligations (e.g., tax and accounting rules)
3. Email Marketing & Soft Opt-In
Under the UK Privacy and Electronic Communications Regulations (PECR), we may send marketing emails to you under the soft opt-in rule if:
- You purchased from us or provided your email during an order or checkout process
- We are marketing our own similar products and offers
- You were given the opportunity to opt out at the time
- Every marketing email contains an easy unsubscribe link
You may unsubscribe from marketing emails at any time by clicking the link at the bottom of the email.
If you opt out, we will stop sending marketing messages immediately.
4. How We Share Your Information
We only share your personal data when it is necessary to run our business.
We may share your information with:
4.1 Delivery partners
To fulfil delivery orders (e.g., Uber Eats, Just Eat, Stuart, or direct couriers).
Shared data: name, address, contact number, and order details.
4.2 Payment processors
For secure payment handling.
We do not store card information.
Examples: Stripe, PayPal, Apple Pay, Google Pay.
4.3 Service providers
These help us operate our website and email systems:
- Website hosting
- Email delivery systems
- Order management tools
- Analytics tools
4.4 Legal requirements
If required by law, regulation, or to protect our rights or the rights of others.
We do not sell, rent, or trade your personal information to third parties.
5. Cookies & Tracking Technologies
Cookies help us improve your experience on our website.
We use cookies for:
- Essential website functions (checkout, cart, login)
- Analytics and performance
- Remembering your preferences
- Security and fraud prevention
You can control cookies through your browser settings.
Disabling essential cookies may affect website functionality.
6. Data Retention
We keep your personal data for as long as necessary for the purposes described in this Privacy Policy, including:
- Order data: up to 7 years (required for accounting and tax laws)
- Marketing data: until you unsubscribe
- Account data: until your account is deleted
- Analytics data: typically 12–36 months
When data is no longer needed, we securely delete or anonymise it.
7. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your personal data (where legally allowed)
- Object to or restrict processing
- Opt out of marketing at any time
- Request a copy of your data in a portable format
- Withdraw consent (where consent was required)
To exercise your rights, contact us at the email below.
8. Protecting Your Data
We take data security seriously and use appropriate measures such as:
- SSL secure encryption
- Firewalls
- Secure hosting
- Limited access to personal data
- Staff training
- Regular security reviews
While no system is completely secure, we work hard to protect your information from unauthorised access, loss, or misuse.
9. International Transfers
Some of our service providers may process data outside the UK.
When this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, secure processors like Google or Stripe).
10. Changes to This Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated “Last updated” date.
11. Contact Us
For questions about this Privacy Policy or to exercise your rights:
Piri Piri Express
Email: hello@piripirimaghull.com
Website:www.piripirimaghull.com
Recent Comments