Yiayias Little Kitchen

Privacy Policy

Last updated: 12/08/2026

YIAYIAS LITTLE KITCHEN INVERNESS LTD (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit yiayiaslittlekitchen.co.uk or place an order with us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

YIAYIAS LITTLE KITCHEN INVERNESS LTD The Raigmore Motel, 38 Old Perth Rd, Inverness, IV2 3RH Company number: SC857601 VAT registration number: 505512426 Email: info@yiayiaslittlekitchen.co.uk Phone: 07476 705816

We are the data controller for the personal data described in this policy.

2. What Information We Collect

When you place an order or use our website, we may collect:

  • Contact details: name, email address, phone number.
  • Delivery information: delivery address, and delivery instructions or notes you provide.
  • Order information: items ordered, order value, order history, dietary or allergen notes you give us.
  • Payment information: payments are processed securely by our third-party payment providers (Square and SumUp). We do not collect or store your full card details on our systems.
  • Technical information: standard website data such as IP address and browser type, collected automatically as part of normal website operation.

We do not knowingly collect information from children, and our ordering service is intended for use by adults placing orders.

3. How We Use Your Information

We use your personal data to:

  • Take, prepare, and fulfil your order, including delivery or collection arrangements.
  • Contact you about your order (e.g. confirmations, status updates, delivery queries).
  • Handle payments securely through our payment providers.
  • Respond to enquiries, complaints, or feedback.
  • Meet our legal obligations, including tax, accounting, and food safety/allergen record-keeping.
  • Improve our website and service.

We do not sell your personal data to third parties, and we do not use your data for automated decision-making or profiling.

4. Our Legal Basis for Using Your Information

We rely on the following legal bases under UK GDPR:

  • Contract: processing needed to take and fulfil your order.
  • Legal obligation: keeping financial and tax records (e.g. VAT), and food safety/allergen information.
  • Legitimate interests: running and improving our website and service, preventing fraud, and handling customer queries.
  • Consent: where you have opted in, for example to receive marketing communications (you can withdraw this at any time).

5. Who We Share Your Information With

We share personal data only where necessary to run our service:

  • Payment providers (Square, SumUp) — to process your payment securely. They act as independent data controllers for the payment data they process.
  • Delivery drivers — your name, delivery address, and phone number are shared with our drivers so they can complete your delivery.
  • Google Maps / Google Places / What3Words — used to look up and map delivery addresses and provide route information to our drivers.
  • IT and hosting providers — who host our website and systems on our behalf, under appropriate data protection terms.
  • Regulators, tax, and law enforcement authorities — where we are legally required to disclose information (for example, HMRC or as part of anti-money laundering checks).

We do not share your data with third parties for their own marketing purposes.

6. How Long We Keep Your Information

  • Customer contact and delivery details (name, phone, email, delivery address) are retained only for as long as necessary to provide our service, and are automatically deleted after a set retention period of inactivity, in line with our data retention policy.
  • Order and financial records (order totals, VAT, itemised order history) are retained for longer, as required by HMRC and UK accounting law, but are not retained in a way that identifies you personally once your contact details have been erased.
  • Driver delivery photos are retained only for a limited period for order-verification purposes and are then automatically deleted.

7. Your Rights

Under UK GDPR, you have the right to:

  • Ask us what personal data we hold about you and request a copy.
  • Ask us to correct inaccurate or incomplete data.
  • Ask us to delete your personal data (“right to be forgotten”), subject to our legal obligations to retain certain records (e.g. financial records).
  • Ask us to restrict or object to certain processing.
  • Withdraw consent at any time, where we rely on consent (e.g. marketing).
  • Complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

To exercise any of these rights, contact us at info@yiayiaslittlekitchen.co.uk or 07476 705816.

8. Cookies

Our website may use essential cookies needed for it to function correctly (for example, to remember your order as you browse the menu). We do not currently use non-essential analytics or advertising cookies. If this changes in future, we will update this policy and, where required, ask for your consent.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data, including secure storage, encrypted handling of sensitive data, and restricted access to customer information. Payment card details are handled entirely by our payment providers and are never stored on our systems.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last updated” date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

YIAYIAS LITTLE KITCHEN INVERNESS LTD The Raigmore Motel, 38 Old Perth Rd, Inverness, IV2 3RH Email: info@yiayiaslittlekitchen.co.uk Phone: 07476 705816

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk.