Privacy Policy

Who is responsible for your information?

PHARAOHS FOOD LTD, trading as Pharaoh's Food, is the controller of the personal information described in this notice.

The registered office above is separate from our customer pickup point at Barker Rd, Maidstone ME15 6JQ.

Information we collect

Depending on how you use our service, we may process:

• Order and contact details: your name, phone number, ordered items and options, order reference, pickup choice and order status.
• Payment records: the amount, currency, online order fee, selected payment provider, provider reference and payment or refund status.
• Messages: information you send when you email us, ask about an order, request allergen information or make a complaint.
• Website and security data: IP address, device and browser information, request timestamps, technical events, and information used to keep the service reliable and prevent misuse.
• Necessary browser storage: a basket, short-lived order-attempt information, a short-lived hosted-checkout continuation link and a short-lived payment-return status token where needed to complete or check your order.

Our online order form is not intended for health information. Please contact us before ordering for current allergen information. If you choose to tell us about an allergy or intolerance in a message, please provide only what is needed for us to discuss your request safely.

How and why we use information

To take and fulfil your order

We use your order and contact details to provide the service you request, confirm payment, prepare the order, identify it at pickup and deal with cancellations, refunds or problems. This is usually necessary to take steps at your request and perform our contract with you.

To tell you when an order is ready

We use the phone number supplied with an order for collection contact and, when the messaging service is enabled, a ready notification. This supports fulfilment of your order; it is not permission for unrelated marketing.

To meet legal responsibilities

We may keep or use information where reasonably necessary for accounting, tax, consumer-protection, food-safety, record-keeping or other legal obligations.

To protect customers and the service

We may use limited technical and order information to secure the websites and API, detect fraud or abuse, investigate faults, prevent duplicate payment attempts, maintain evidence of transactions and establish or defend legal claims. We rely on our legitimate interests only where they are not overridden by your rights and interests.

With your consent

If we introduce an optional use that requires consent, we will ask first. You can withdraw that consent at any time. We do not currently use the websites for non-essential advertising or analytics tracking.

Who we share information with

We share only what is reasonably needed with:

• Cloudflare, which provides website delivery, security, the order API and the D1 database used by the service.
• The active hosted-payment provider, which processes checkout and returns a payment status to us. Its own terms and privacy notice apply to the payment page.
• Twilio, when ready notifications are enabled, which receives the destination phone number and message needed to send the notification.
• Professional advisers, insurers, regulators, courts, law enforcement or public authorities where reasonably necessary or required by law.

We do not sell your personal information. Some service providers may process information outside the UK. Where UK data-protection law requires it, we expect an approved transfer mechanism and appropriate safeguards to be used.

Browser storage and tracking

The order site uses limited browser local storage where necessary to remember your basket, prevent an accidental duplicate order and reconnect you with a recent hosted checkout or payment result. These entries are minimised, given an expiry time and are not used for advertising. Basket and checkout-continuity storage does not need your name or phone number.

If a payment result is still unknown when checkout continuity expires, a minimal opaque operation record may remain so the browser blocks a potentially duplicate replacement order. It does not contain your name or phone number in readable form and is cleared when a terminal payment result is confirmed or the attempt is safely resolved.

We do not currently use non-essential analytics, advertising cookies or cross-site tracking. A cookie banner is therefore not shown. Strictly necessary storage and security mechanisms may operate without optional consent. If that changes, we will update this notice and ask for consent where the law requires it.

You can clear site data in your browser. Doing so may empty a basket or prevent the browser from reconnecting to an unfinished or recent order.

How long we keep information

We keep personal information only for as long as reasonably needed for the purpose collected. The period depends on whether an order was completed, any refund, complaint or dispute remains open, and the records we must retain for accounting, tax, food safety, security or legal claims.

Basket and payment-return entries have short expiry times appropriate to those journeys. A minimal duplicate-prevention record may be retained beyond checkout continuity while an attempt is unresolved. When information is no longer required, we delete it or make it non-identifying where practical.

How we protect information

We use proportionate technical and organisational safeguards. These include encrypted network connections, restricted owner access, hosted card entry, payment verification, limited public order status tokens and controls intended to prevent duplicate payment operations. No online service can promise absolute security.

Your UK data-protection rights

Depending on the circumstances, you may have rights to ask for access to your information, correct it, erase it, restrict or object to its use, or receive certain information in a portable form. Where processing relies on consent, you may withdraw consent. These rights are not absolute and legal exceptions can apply.

Email [email protected] to make a request or data-protection complaint. We may need proportionate information to confirm your identity and locate the relevant record. We will handle requests and complaints in line with applicable UK law.

You can also complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator. We would appreciate the opportunity to address your concern first.

Other websites and changes

Our websites may link to social networks, maps and a hosted payment page. Those services control their own websites and provide their own privacy information.

We may update this policy when the service, providers or law changes. The date at the top shows the latest published version. You can print or save this page using your browser's print command.