Privacy Statement for Customers

Unless we inform you differently, this privacy statement (‘’Statement’’) explains how Operation S.T. Ltd trading as Tutbury Village Kitchen (TVK) will collect, use, disclose, and otherwise process personal data and applies to the processing of personal data of customers who make use of this order website and order app.

At TVK we are committed to protecting the privacy of everyone in our community. If you have any questions on the way we retain your personal data you can contact us by email or in person in the kitchen.

What personal data we process and why

Personal data, in this Statement also referred to as “your data”, means any information or set of information from which we are able, directly or indirectly, to personally identify you, in particular by reference to an identifier, e.g. name and surname, email address, phone number, etc. It does not include data where the identity has been removed (anonymous data).

Whenever you interact with TVK via our Services we collect and process your personal data. TVK may process your personal data for the following purposes:

1. Ordering process

We process the personal data you provide to us when you place your order. This personal data is necessary to execute your order, confirm your order, and to assess your order, payment, and a possible refund. Your information (such as the items you add to your basket) allow us to process your order and send you an accurate bill. It also helps us contact you where necessary. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law. We may process the following personal data in the ordering process:

• Name

• Contact data

• Order and transaction data

• Payment data

• Identity and/or age verification data

As part of our Services we may sell products that may reveal sensitive personal data, such as health-related information (allergies or dietary requirements), information about your religion (such as to keep your religious dietary restrictions). We will collect and process this data with your consent as part of your order.

2. Reviews

When permitted and/or required by applicable law or where we have your consent, we may ask, after your order, you to submit a review of your experience of our products and/or services.

TVK processes the personal data you provide when submitting a review. You can withdraw your consent by contacting us. We may process the following personal data when you post a review:

• Name

• Contact data

• Review

When your review is published, the review, and your first name, may be made available to the public.

3. Customer Services and Support

When you contact our customer services support, we will use the personal data you provide to answer your question or handle your complaint. We may collect personal data to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.

Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law. We may process the following personal data for customer service purposes:

• Name

• Address data (if applicable)

• Contact data

• Order and transaction data

• Payment data (if applicable)

• Comments (if applicable)

• Content of communication between you and TVK

• Any other content that may be required for compliance with the applicable laws

4. Marketing

We process your personal data to be able to send you (personalised) marketing communications and notifications to administer, support, improve and develop our Services. There may be cases where TVK may process your personal data for promoting TVK products and services, to personalize your shopping experience, and to show you tailored advertising. We rely on your consent unless your consent is not necessary according to the applicable law, in particular this is the case if you are one of our customers and are contacted regarding similar products and services.

Whenever you want to change your preferences with respect to receiving such communications, you can unsubscribe using the unsubscribe link or method indicated in the messages or by contacting us.  We may rely on our legitimate interest (or equivalent under applicable law) to categorise your interests (i.e., define customer segments based on first-party data for audience creation) in order to provide you with the relevant marketing content. You may object to this processing by contacting us.

We may process the following personal data for marketing purposes:

• Name

• Contact data

• Order and transaction data

• Payment data

• Review(s)

• Campaign data

• Device ID

• Cookie and Technology data

In order to enable us to personalise your user experience with TVK and optimise our Services offered to you, we may use automated decision making and profiling for marketing purposes. Please see ‘’Use of Automated decision-making and algorithmic tools’’ section below for more information.

5. Cookies & Similar Technologies

TVK uses cookies or similar technologies for functional, analytical, and personalisation, and tailored advertising purposes. Data processed for these purposes depends on the preferences set by you.

We do not share your personal data with third parties.

You can change your cookie consent settings via managing your preferences in the cookie banner, and/or your settings in the tool you use to browse. Please note that disabling cookies may restrict your ability to use some of the Services and/or features on the website or impair your user experience.

6. Fraud prevention and Misconduct

We also process personal data to prevent misconduct on and via our Services. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, to comply with law or our legitimate interest (or equivalent under applicable data protection law). We may process following personal data for fraud prevention and misconduct purposes:

• Name

• Contact data

• Identity and/or age verification data

• Order and transaction data

• Payment data

• Device information

• IP address

• Browser information

7. Analytics & Product Improvement

TVK uses your personal data to be able to understand how you interact with our platforms, our products and Services, to improve the performance of these. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, to comply with law or our legitimate interest (or equivalent under applicable data protection law). We aim that the reports do not contain any information that can be traced back to you.

8. Campaigns & Contests

TVK may launch specific campaigns or contests in connection to its Services. Joining TVK campaigns or contests is always on a voluntary basis. We may rely on your consent unless your consent is not necessary according to the applicable law. You can always withdraw your consent via method indicated in the campaign or by contacting us.

We may process the following personal data for campaigning purposes:

• Name

• Contact data

• Order and transaction data (optional)

• Campaign data (optional)

How we collect your personal data

We acquire, process and retain your personal data, as well as personal data about devices you use to navigate to TVK platforms (e.g. your computer, mobile phone or other means), which you provide to us by ordering or otherwise by contacting us.

We process personal data that you provide voluntarily and that we collect automatically for the purposes outlined in this statement.

• Personal data that you provide voluntarily: We may receive personal data provided from you when you place your order or provide for your marketing preferences or customer reviews in connection to our Services.

• Personal data that we collect automatically: With your prior consent or when permitted by applicable law, when you browse our platforms, we may automatically collect technical data about your equipment, browsing activities and patterns. We use this personal data by using cookies, and other similar technologies. For our cookie statement, please refer above (Cookies & Similar Technologies) for more information.

Age

Our Services are not intended for persons defined as underage by applicable local laws, nor do we intend to collect personal data of visitors who are under the defined legal age. However, we are unable to verify visitors’ ages. We therefore advise parents and/or legal guardians to monitor their children's online activities, to prevent their personal data being collected without parental or guardian consent. If you feel that we have collected personal data of a minor without consent, please contact us.

How long we keep your data

TVK has to take into account local data retention requirements. We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for (for details see above paragraph “What personal data we process and why”), including for the purposes of satisfying any legal, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we take into account the following criteria such as:

• Type of your personal data

• Litigation and Dispute Resolution: personal data used for the establishment, exercise or defence of legal claims

• Applicable legal ground (if based on consent until you withdraw your consent)

• End of your contract with TVK

• Fraud prevention and other compliance requirements

• The period required to serve the respective business purpose (e.g. how long is the data needed to provide you with our Services or to operate our business)

If you have any questions or wish to obtain more detail in relation to criteria set out above please contact us.

In the event the data falls into more than one retention terms category, the category with the longer retention requirement shall prevail, other requirements (such as access, security etc) notwithstanding.

Sharing your personal data with others

We do not share your personal data.

Third-party websites

Our website may include links to third-party websites. When accessing such third-party websites, please note that each of these websites has its own privacy statement. Although TVK takes great care in selecting websites to link to, we cannot take responsibility for the way in which they handle your personal data.

Your privacy rights

How to exercise privacy rights or complaints

If you have any questions about your privacy rights or you wish to exercise the abovementioned rights you may contact us via the contact details set out below.

We will do our best to address your request quickly & satisfactorily. In certain cases, we may ask you to verify your identity before we can act on your request.

We inform you that, with regard to your personal data, you can exercise the rights provided for by, and pursuant to applicable data protection laws, which may include:

Right of access

You have the right to access and be informed about your personal data processed by us. You can request a copy of your personal data by contacting us.

Right to withdraw consent

In case the processing is based on a consent you may withdraw your consent at any time. Withdrawing a consent may lead to fewer possibilities to use our Services. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to rectify

You have the right to have incorrect or incomplete personal data we have stored about you corrected or completed by contacting us.

Right to erasure

You may also ask us to delete your personal data from our systems. We will comply with such a request unless we have another legal ground to not delete the data in terms of applicable laws.

Right to object

You may have the right to object to certain general use of your personal data if such data are processed for other purposes than necessary for the purposes set out in this Statement except for compliance with a legal obligation. If you object to the further processing of your personal data, this may lead to fewer possibilities to use our Services.

You can also object to the use of your personal data for direct marketing communications based on legitimate interest.  If you object to the processing of your personal data for direct marketing purposes, the relevant personal data shall no longer be processed for such purposes. You may still see advertisements on our platform or in third party platforms but not based on processing of your data or because you have given consent.

Right to restriction of processing

You may request us to restrict processing of personal data for example when your data erasure, rectification or objection requests are pending and/or when we do not have other legal grounds to process your data. This may however lead to fewer possibilities to use our Services.

Right to data portability

You have the right to receive your personal data processed in accordance with this Statement in a machine-readable format, so that you can store this data in a database of yours or of a third party.

Right to lodge a complaint

You have the right to lodge a complaint with the relevant supervisory authority if you consider that processing of your personal data is infringed.

Security

TVK takes personal data protection seriously and we therefore take appropriate measures to protect your personal data. Within TVK we limit the access to your data as much as possible and only provide our employees access to your data on a “need-to-know” basis.

If you feel that your personal data are not adequately protected or there are indications of misuse, please contact us.

Contact us

The data controller of your personal data is Operation S.T. Ltd, trading as Tutbury Village Kitchen.

If you need to contact us to make requests or if you have any questions and concerns about this Statement and/or our privacy practices and processing activities, please contact us via the contact details set out below.

info@tutburyvillagekitchen.com

17 High Street, Tutbury, DE13 9LP

Updates to this Statement

This Statement might change from time to time.

The most current version of this Statement will govern our use of your data and can be found in the footer of the website or within your app.

Version: September 2025