Privacy
Policy.

Greek Tings Ltd is responsible for the personal information described in this Privacy Policy.

In this Privacy Policy, “Greek Tings”, “we”, “our”, and “us” refer to Greek Tings Ltd.

For privacy or data protection enquiries, contact:

Depending on the enquiry or booking, we may collect:

• Name and contact details
• Billing details where required for invoicing
• Event date, time, location, guest numbers, and budget
• Menu choices, service requirements, and other information needed to plan the event
• Dietary requirements and allergy information
• Limited information about the occasion or guests where relevant to the booking
• Information about the event venue or kitchen, including photographs you choose to provide
• Correspondence relating to your enquiry or booking
• Booking history and limited internal customer-service records relating to repeat enquiries and future bookings

Depending on the order, we may collect:

• Name
• Email address
• Telephone number
• Billing and delivery addresses
• Order details
• Delivery instructions where provided
• Dietary or allergy information where you separately provide this to us

We also retain invoice and payment records relating to bookings and orders.

Greek Tings does not collect or retain full payment-card numbers.

Most personal information is provided directly by you.

We may also receive personal information:

• From a person organising an event on behalf of other guests, including dietary or allergy information relating to those guests
• From a third-party booking platform where a booking or enquiry is made through that platform

Where information is received through a booking platform, we receive only the booking and contact information made available to us through that service.

We use the information needed to respond to an enquiry, prepare a quotation, plan an event, communicate with you, and provide the agreed catering service.

Our lawful basis is that the processing is necessary to take steps at your request before entering into a contract or to perform our contract with you.

We use customer, order, billing, and delivery information to process and fulfil GT Online Store purchases and arrange delivery.

Our lawful basis is performance of our contract with you.

We process and retain financial records where necessary to meet our accounting and tax obligations.

Our lawful basis is compliance with a legal obligation.

We retain limited information about completed bookings and previous customer relationships to help us manage repeat enquiries and future bookings.

Our lawful basis is our legitimate interest in managing repeat customer relationships and future booking enquiries.

We use dietary information where necessary to plan and provide the catering service requested.

Our lawful basis is performance of the contract where the information relates to the customer making the booking.

Where allergy or dietary information reveals information about a person's health, we use it only to plan and safely provide the relevant catering service.

Where the information relates to the person making the booking, our lawful basis is performance of the contract.

Where the information relates to another guest, our lawful basis is our legitimate interest in safely providing the catering service requested by the organiser.

Because health information is special-category personal data, we additionally rely on explicit consent under Article 9(2)(a) of the UK GDPR.

Certain personal information is necessary for us to process an enquiry, accept and manage a booking, fulfil a GT Online Store order, issue an invoice, or arrange delivery.

If the necessary information is not provided, we may be unable to provide the relevant service or fulfil the order.

Dietary and allergy information is only required where it is relevant to the food or service being provided.

Where necessary for the purposes described in this Privacy Policy, personal information may be processed or shared with:

• Website and e-commerce service providers
• Payment-processing providers
• Accounting service providers and our accountants
• Delivery and courier providers
• Third-party booking platforms where a booking is made through such a platform

We only provide the information required for the relevant service.

Some service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred internationally, the transfer is protected using an applicable UK adequacy arrangement or other safeguards recognised under UK data-protection law.

Further information about the safeguards used can be requested by contacting:

Information relating to an unsuccessful enquiry is deleted once the enquiry has been closed and is no longer required.

General booking information and customer-service records are retained for up to two years after the event.

Dietary and allergy information is retained only for as long as necessary to plan and provide the relevant catering service and deal with any immediate follow-up relating to that booking.

After that, it is deleted unless continued retention is required by law or is necessary in connection with an active dispute.

GT Online Store customer and order information is retained for up to two years after the order.

Accounting, invoice, and payment records are retained for the period required by applicable accounting and tax law.

Our website uses cookies that are necessary for the website to operate.

Non-essential analytics cookies are used only where you consent to them through our cookie banner.

You can accept, decline, or manage non-essential cookies using the cookie controls provided on the website.

Our lawful basis for non-essential analytics processing is consent.

Depending on the circumstances and the lawful basis being relied upon, you may have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Request restriction of processing
• Object to certain processing
• Request transfer of your personal information where the right to data portability applies

You can exercise your rights by contacting:

Where we process personal information on the basis of our legitimate interests, you have the right to object to that processing.

To object, contact:

Where we rely on consent, including explicit consent to process health-related allergy information, you may withdraw that consent at any time by contacting:

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

If you have concerns about how Greek Tings uses your personal information, you can contact us at:

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK regulator for data protection.