Privacy Policy

1. Who we are

MFrench Catering Limited (“we”, “us”, “our”), company number 16934420, registered office 47 Swanbridge Road, Bexleyheath, DA7 5BS, is the data controller for the personal information described in this policy. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What information we collect

We collect personal information that you provide directly to us, including:

• Contact details — name, email address, phone number and postal address
• Enquiry and booking details — event date, guest numbers, dietary requirements, venue and menu preferences
• Correspondence — messages sent via our contact and enquiry forms, or by email or phone
• Marketing preferences — whether you have opted in to receive marketing communications
• Technical and usage data — collected automatically via cookies, such as pages visited and browser type (see Section 6)

We do not knowingly collect special category data (such as health information) except where you voluntarily provide dietary or allergy information for the purpose of planning your event.

3. Why we collect it

We use your personal information for the following purposes:

• To respond to enquiries and provide quotations (performance of a contract or steps prior to entering one)
• To plan and deliver catering services you have booked, including managing dietary and allergen requirements (performance of a contract)
• To send marketing communications where you have given consent (consent)
• To maintain business records, accounting and tax compliance (legal obligation)
• To improve our website and services through aggregated analytics (legitimate interests, where you have consented to analytics cookies)
• To protect our business, prevent fraud, and comply with legal requirements (legal obligation and legitimate interests)

4. How we store your information

Personal data is stored securely using reputable hosting and email providers, with access restricted to staff who need it to carry out their role. We apply appropriate technical and organisational measures, including access controls and secure connections, to protect your data against unauthorised access, loss or misuse.

5. Who we share it with

We do not sell your personal information. We may share limited data with:

• Trusted staff and subcontracted catering or event staff involved in delivering your booking
• Service providers who support our business operations, such as email, hosting, payment and accounting providers, bound by data protection agreements
• Regulatory or legal authorities, where required by law

Any third parties who process data on our behalf are required to protect it in line with UK GDPR and only use it for the purposes we specify.

6. Cookies and analytics

Our website uses cookies to operate correctly, understand how the site is used, and — where you consent — support marketing activity. You can manage your cookie preferences at any time via “Cookie Settings” in the footer, or read our full Cookie Policy for details of each cookie we use.

7. Data retention periods

We keep personal data only for as long as necessary for the purpose it was collected:

• Enquiry details that do not result in a booking: up to 12 months, then deleted
• Booking and event records: up to 7 years, to meet accounting and tax obligations
• Marketing consent records: until you withdraw consent, plus a reasonable period to evidence that withdrawal
• Website analytics data: typically retained in anonymised or aggregated form for up to 26 months

8. Your rights under UK GDPR

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data, where applicable
• Restrict or object to certain processing of your data
• Withdraw marketing consent at any time
• Request a copy of your personal data in a portable format
• Lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise these rights at any time via our Data & Marketing Opt-Out page, or by contacting us directly using the details below.

9. Contact us about privacy

For any question about this policy or your personal data, please contact us at privacy@mfrenchcatering.co.uk or write to us at 47 Swanbridge Road, Bexleyheath, DA7 5BS.

If you remain unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office at ico.org.uk.