Privacy Policy

Last Updated: July 2026

Big Bite Theory (“we”, “us”, “our”) is a cloud kitchen based in Rugby, UK. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and ordering service, in compliance with the UK GDPR and Data Protection Act 2018.

1. Data Controller

Big Bite Theory, Rugby, UK. Contact: reshmi.arun@bigbitetheory.co.uk

2. What Data We Collect

When you place an order we collect: your name, email address, delivery address, phone number (if provided), and order details. Payment information is processed securely by our payment provider and is not stored by us.

3. How We Use Your Data

We use your personal data to: process and fulfil your orders; communicate order confirmations and updates; handle refunds or complaints; and improve our service. We do not use your data for marketing without your explicit consent.

4. Legal Basis for Processing

We process your data on the basis of contractual necessity (to fulfil your order) and, where applicable, our legitimate interests in operating our business.

5. Data Sharing

We do not sell your personal data. We may share data with trusted third-party delivery and payment service providers solely for the purpose of completing your order.

6. Data Retention

We retain your order data for up to 3 years for accounting and legal compliance purposes, after which it is securely deleted.

7. Your Rights

Under UK GDPR you have the right to: access your personal data; request correction or deletion; object to processing; and lodge a complaint with the ICO (ico.org.uk). To exercise any right, contact us at reshmi.arun@bigbitetheory.co.uk

8. Cookies

Our website may use essential cookies to ensure basic functionality. No tracking or advertising cookies are used without your consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.