Privacy Policy

Who controls your data

Prime Fire Restaurant is the controller for personal data collected through this website, orders, reservations and contact requests. Privacy enquiries can be sent using the contact details below; any applicable ICO registration details are available on request.

Data we use

We collect the details needed to fulfil an order or reservation, respond to an enquiry, prevent fraud and keep legally required records.

• Name, email address and telephone number
• Order contents, allergy notes, fulfilment address and status history
• Reservation details and special requests
• Payment status and Stripe identifiers — never full card details
• Consent choices, security logs and technical request data

Lawful bases and purposes

Contract is used to process orders and reservations; legitimate interests support service security, operational reporting and customer support; legal obligation applies to tax and accounting records. Marketing requires separate consent and is never a condition of ordering.

Processors and transfers

The private PostgreSQL database and application storage are operated with the selected hosting provider. Telegram currently delivers operational staff alerts. Stripe payment processing and transactional email apply only if those optional services are enabled later. Hosting and security providers may also process limited technical data. Where a provider processes data outside the UK, Prime Fire relies on applicable contractual and legal transfer safeguards.

Retention and your rights

Retention is configurable and deletion or anonymisation is used where records no longer need to identify a customer. UK data protection rights can include access, correction, erasure, restriction, objection and portability. Identity will be verified before a request is fulfilled.

You may complain to the UK Information Commissioner's Office if a concern is not resolved. Contact info@primefirerestaurant.co.uk or write to Prime Fire Restaurant, 27A London Road, Alderley Edge, SK9 7JT.