Privacy
Policy

We collect information that is reasonably necessary to operate our website, process customer orders and provide our food services.

• Contact details: Your name, email address and telephone number when you place an order or contact us.
• Order information: Items selected, quantities, order references, collection preferences and delivery instructions.
• Delivery details: Your delivery address and relevant information needed to arrange an order.
• Payment information: Payment status, transaction references and relevant payment confirmations. Full payment card details are handled by the relevant payment provider where applicable.
• Website information: Device type, browser details, approximate usage information and technical records generated when you access our website.
• Communication records: Messages, enquiries and information you voluntarily provide when contacting our team.

Personal information is used only for relevant business and service purposes, including:

• Receiving and processing food orders.
• Confirming payments and issuing order confirmations.
• Arranging collection and home delivery.
• Responding to customer enquiries and service requests.
• Providing order updates and important service information.
• Maintaining website functionality and improving the ordering experience.
• Maintaining appropriate financial and business records.
• Meeting applicable legal and regulatory obligations.

We process personal information in accordance with applicable UK data protection requirements. Depending on the circumstances, our lawful bases include:

• Contract: Processing information necessary to accept, fulfil and manage your orders.
• Legal obligation: Keeping records and meeting relevant accounting and regulatory requirements.
• Legitimate interests: Maintaining our website, managing customer enquiries, improving our services and protecting business operations, where these interests do not override your rights.
• Consent: Using optional cookies or sending promotional communications where consent is required.

When you place an order through our website, the information you provide is used to prepare and manage your purchase. This may include your selected food items, quantities, contact details, delivery address and collection preferences.

Payments are processed through the payment methods available at checkout. Relevant payment providers may process transaction information to complete payments, verify transactions and maintain payment records.

Rye Lantern does not require customers to send full payment card details through ordinary email or customer messages. Please use the payment options provided during checkout.

Where you select home delivery, your name, delivery address, contact details and relevant order information may be shared with the delivery service responsible for fulfilling your order.

For collection orders, relevant order details may be used by our kitchen team to identify and prepare your purchase. Information is limited to what is reasonably necessary to complete the service.

We do not sell personal information. Information may be shared with relevant service providers when necessary to operate our business, including:

• Website hosting and website maintenance providers.
• Payment processing providers.
• Delivery and order fulfilment services.
• IT, security and technical support providers.
• Professional advisers and relevant authorities where legally required.

Service providers are expected to handle personal information appropriately and only for the purposes of the services they provide.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy or to meet applicable legal requirements.

When information is no longer required, it will be securely deleted or anonymised where reasonably practicable, subject to applicable retention obligations.

Our website may use cookies and similar technologies to support essential website functions and improve the browsing experience.

• Essential cookies: Support basic website functions, shopping basket activity and checkout operations.
• Preference cookies: Remember selected website settings where enabled.
• Analytics cookies: Help us understand website usage where these technologies are implemented and permitted.

Non-essential cookies will only be used where the required consent has been obtained. You can manage cookie preferences through the available website controls or your browser settings.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration or disclosure.

Access to customer information is limited to individuals and service providers who need it to perform relevant business duties. Information is handled according to its purpose and level of sensitivity.

While appropriate safeguards are maintained, no internet-based system can be guaranteed to be completely secure.

Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, appropriate safeguards will be used where required under applicable data protection legislation.

Such safeguards may include adequacy regulations, approved contractual protections or other recognised transfer mechanisms.

Under applicable UK data protection law, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information in eligible circumstances.
• Request restriction of certain processing activities.
• Object to processing based on legitimate interests.
• Request a copy of information in a portable format where applicable.
• Withdraw consent where processing is based on consent.

To exercise your rights, contact us using the details provided below. We normally respond within one month of receiving a valid request. Where a request is complex or multiple requests are received, the applicable legal extension may be used and you will be informed accordingly.

You may also raise a concern with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Our website and online ordering services are intended for general customers and are not specifically designed to collect personal information from children.

Where information relating to a child is provided in connection with an order, it should be limited to details genuinely necessary for fulfilment and provided by an appropriate adult where required.

We may update this Privacy Policy when our services, website operations or applicable requirements change. The latest version will be published on this page and will take effect immediately upon publication.

We encourage customers to review this page periodically to remain informed about how their information is handled.