Privacy Policy

Last updated: October 2026

Who we are

Sushma’s Kitchen is a home catering business based in Windsor, United Kingdom. We are the “data controller” for any personal information you share with us.

What information we collect

When you place an order or get in touch, we may collect:

• your name
• your phone number or Instagram username
• your delivery address, if you choose delivery
• your order details: dishes, number of guests, date, and any notes you add
• dietary and allergy information, if you choose to tell us

How we collect it

Our website’s menu builder does not store or send any information to us. It simply prepares a message on your device. Your details only reach us if you choose to send that message on WhatsApp or Instagram. We also receive information when you message or call us directly.

Why we use it

We use your information only to:

• prepare, deliver or arrange collection of your order
• contact you about your order, such as confirming timings, price or any changes
• answer your questions

Our legal basis is that we need this information to fulfil your order (a contract with you).

Allergy and dietary information counts as health information under UK law. We only use it to prepare your food safely, and only with your explicit consent, which you give by choosing to share it with us. You can withdraw your consent at any time, but we may then be unable to take your order safely.

We will never use your information for marketing without your permission, and we never sell or share it with anyone for their own marketing.

Who can see it

Only Sushma’s Kitchen. Your messages are also processed by the platforms you choose to contact us on: WhatsApp and Instagram (both owned by Meta), and Squarespace, which hosts this website. Each has its own privacy policy.

How long we keep it

We keep order details for up to 12 months to deal with any questions or repeat orders. We then delete them, unless we’re required by law to keep a record. For example, payment records may be kept for 6 years for tax purposes.

Payments

We don’t take card payments through this website and never store card details.

Cookies

This website is hosted by Squarespace, which uses essential cookies to make the site work and may use analytics cookies to show us how the site is used. You can manage cookies through the banner on our site or in your browser settings. See Squarespace’s cookie policy for details.

Your rights

Under UK data protection law (UK GDPR), you can ask us to:

• give you a copy of the information we hold about you
• correct anything that’s wrong
• delete your information
• restrict or object to how we use it

To make a request, contact us using the details above. We’ll respond within one month.

Complaints

If you’re unhappy with how we’ve handled your information, please talk to us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk · 0303 123 1113.

Changes

We may update this policy from time to time. The latest version will always be on this page.