Privacy Policy

Last updated: 1 October 2026

1. Who we are

Chilli Fusions is the data controller for personal data collected through this website. Data controller: [BUSINESS / LEGAL ENTITY NAME], company number [COMPANY NUMBER], registered address [REGISTERED ADDRESS]. Contact email: [CONTACT EMAIL].

2. Data we collect

When you place an order enquiry we collect:

• Your name
• Your phone number
• Your email address (optional)
• The dishes and quantities you request, and any dates or contact preferences you share with us

3. Lawful basis for processing

• Contract: to prepare and fulfil orders you ask us to make.
• Legitimate interest: to respond to your enquiries.
• Consent: for any marketing messages, which we only send if you explicitly agree.

4. How we use and store your data

We use your details only to respond to your enquiry and arrange your order. We keep general enquiry data for 12 months, or until you ask us to delete it, whichever is sooner.

5. Third-party processors

• Website hosting: [e.g. Cloudflare]
• Order enquiry handling (CRM / webhooks): [e.g. GoHighLevel]
• Social media: our Facebook page is linked from this site. Facebook's own privacy policy applies when you visit it.

6. Marketing communications

We will only send marketing messages if you have opted in. You can opt out at any time by replying "STOP" or emailing [CONTACT EMAIL]. We will never sell your data.

7. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected (rectification)
• Have your data erased
• Restrict how we process your data
• Object to processing

To exercise any of these rights, email [CONTACT EMAIL]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.