This policy explains what personal information Fan Thai Sticks collects when you visit this website, ask for a quote or book us, why we need it, who sees it and the rights you have over it. We have kept it short and in plain English.
Who we are
Fan Thai Sticks Catering is a family-run Thai catering business based in Chelmsford, Essex CM2 0GT. We are the controller of the personal information described here. If you have a question about your data, email Show email address or call Show phone number.
What we collect
When you ask for a quote, book or contact us
- Your name, email address and phone number
- Event details: date, venue or postcode, guest numbers, the service and menu you are interested in, and anything you write in your message
- Dietary requirements and allergies for you or your guests, which can reveal health information. We only use this to cook and serve safely.
- Booking, invoice and payment records. We do not take or store card details on this website.
When you use the website
- With your consent, analytics about the pages you visit, the device and browser you use and how you found us. See our cookie policy.
- Basic technical logs kept by our hosting provider, such as IP address and browser, to keep the site secure and working.
- Our forms use a spam check that runs in your browser. It does not use cookies or any third-party captcha service.
How we use it and why
| What we do | Legal basis |
|---|---|
| Reply to your enquiry and prepare a quote | Steps you asked us to take before a contract |
| Plan, cook and serve your event, and talk to your venue or planner about it | Performing our contract with you |
| Use allergy and dietary information to keep guests safe | Your explicit consent, given when you tell us |
| Keep invoices and accounting records | Legal obligation |
| Protect the website and forms from spam and misuse | Our legitimate interests |
| Measure how the website is used | Your consent, through the cookie banner |
| Send occasional offers by email | Your consent. You can unsubscribe at any time. |
Who we share it with
We never sell or rent your personal information. We only share it with the services we need to run the business, under contracts that require them to keep it safe:
- Supabase, which hosts the database behind our quote and booking forms
- Vercel, which hosts this website
- Brevo and Google (Gmail), which we use to send and receive email
- Matomo, our analytics tool, which runs on our own server (only with your consent)
- Your venue, planner or event organiser, only where needed to deliver your event
- Our accountant and HMRC, for tax and accounting
Transfers outside the UK
Some of these providers store or process data outside the UK, for example in the European Union or the United States. When they do, the transfer is protected by UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
- Enquiries and quotes that do not go ahead: up to 2 years, then deleted
- Bookings, invoices and payment records: 6 years, as required for tax
- Allergy and dietary notes: until your event is over and any follow-up is settled
- Email marketing: until you unsubscribe
Keeping it safe
Access to customer information is limited to the people who run Fan Thai Sticks. Our systems use encrypted connections, access controls and regular backups, and we only use providers with strong security standards.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the information we hold about you
- correct anything that is wrong or incomplete
- delete your information, unless we must keep it by law
- restrict or object to how we use it
- send your information to you or another business in a common format
- stop using it where you gave consent, at any time
Email Show email address and we will reply within one month. There is no charge. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on Show phone number, but please talk to us first so we can try to put it right.
Children
Our services are booked by adults. We do not knowingly collect information from children under 13.
Changes to this policy
We update this policy when the way we use information changes. The date at the top of the page shows the latest version.