Privacy Policy

How we collect, use, and protect your personal information in line with GDPR.

Applicable from 25 May 2018
This privacy policy explains how Istanbul Sandhurst collects, shares, and uses your personal information. By using our Services, you agree to us using your personal information as described here. This policy covers the collection, processing and other use of personal data under the Data Protection Act 1998 (DPA) and the General Data Protection Regulations (GDPR). References to “we”, “us” or “our” refer to https://istanbulsandhurst.uk.
1

Information We Collect From You

The personal information we may collect broadly falls into the following categories:

1.1 Information you provide voluntarily

Certain parts of our Services may ask you to provide personal information voluntarily. For instance:

  • Registration information: When you create an account or fill in forms, we collect your name, address, telephone number, email address and password.
  • Transaction information: We collect information relating to your Orders, including payment information via our secure payment processors. We do not store your credit card information. We also collect delivery details to fulfil each Order.
  • Marketing preferences: We collect information about your preferences to receive marketing communications any time you subscribe or unsubscribe.
1.2 Information we collect automatically

When you access our Services, we may collect certain information automatically from your device. For instance:

  • Activity information: We collect information about your usage of the Services, including content you create, notifications or messages you post, and what you search for, look at and engage with.
  • Cookies and similar technologies: We use cookies and similar tracking technology to collect information such as your IP address, device ID, browser type, and how you interact with the Services.
1.3 Information from third-party sources

We may receive personal information from third parties where they have your consent or are otherwise legally permitted to share it. For instance:

  • Analytics reports and market research surveys: We collect information from affiliates about how you respond to our marketing campaigns so we can customise our Services accordingly.
  • We may also receive aggregated audience segment information from third parties to display targeted advertising on platforms like Facebook and Google.
2

Our Use of Collected Information

Registration information

Registration information allows us to give you access to the Services, authenticate your access, contact you for your views, and notify you of important changes or updates.

Transaction information

Your transaction information allows us to process your Order and send you an accurate bill. Istanbul Sandhurst may contact you by email, phone or SMS with status updates or to resolve problems with your account or Order.

We also analyse completed transaction data to administer, support and improve our business and to detect and prevent fraud or prohibited activities.

Marketing preferences

Istanbul Sandhurst may market to you, where permitted by law, by post, email, telephone, SMS, in-app messaging or push notification. You can unsubscribe at any time using the link in any communication you receive, or by amending your profile settings.

Activity & cookie information

We analyse your buying habits and how you interact with our Services to suggest food options and personalise your experience. We may also display customised advertisements based on your usage and buying history.

We work with advertising affiliates and use cookies to display personalised advertisements. Cookies also help us manage features, content, searches, and re-present your information at the point of Order.

3

Who We Share Personal Information With

In delivering your food order, depending on the circumstances, we may share your personal information with:

  • Delivery individuals or companies so that the food order can be processed and delivered to you.
  • Third parties who support our Services, including customer support agents, website hosting providers, marketing service providers (OrderSense), eCRM partners (e.g. Sendinblue), SMS providers (e.g. Mobivate), delivery companies, market research firms, and payment processors. Any of these may be inside or outside your country of residence.
  • A new business partner or owner in the event of a joint venture, acquisition, sale or merger. We will always require such parties to only use your information for the purposes described in this policy.
  • Any law enforcement or regulatory body, government agency, court or other third party where disclosure is required by applicable law, to exercise or defend legal rights, or to protect your vital interests.
  • Any other person where you have given your explicit consent. We will not sell, distribute or lease your personal information without your permission or legal obligation.
4

Legal Basis for Processing Personal Information

Our legal basis for collecting and using your personal information will depend on the specific context in which we collect it. Our main reason for collecting and using your personal information is to ensure you receive your Food Order as expected.

Where we ask you to provide personal information to comply with a legal requirement or to perform a contract, we will make this clear at the time and advise whether the provision of your personal information is mandatory, along with any consequences of not providing it.

If you have questions about the legal basis on which we collect and use your personal information, please contact us using the details in the How to Contact Us section below.

5

International Data Transfers & Security

Our hosting provider servers may be located outside the United Kingdom. While such countries may have different data protection laws, we implement appropriate safeguards to protect your personal information in accordance with this Privacy Policy.

Security

We place immense importance on keeping your personal information safe and secure. We implement appropriate technical and organisational measures and industry-standard technology to protect against unauthorised access, unlawful processing, accidental loss, destruction and damage.

Where you have chosen a password to access certain parts of the Services, you are responsible for keeping it confidential. We advise you not to share your password with anyone. We will not be liable for any unauthorised transactions entered using your name and password.

6

Data Retention

Istanbul Sandhurst will retain your personal information where we have an ongoing legitimate business need to do so (for example, while you hold an account with us or to meet legal, tax or accounting obligations).

If you object to us processing certain categories of your personal information, we will retain a record of your objection so that we can continue to respect your wishes.

We will destroy or permanently anonymise your personal information once it is no longer needed for ongoing legitimate business or legal purposes. Where immediate deletion is not possible (e.g. information stored in backup archives), we will securely isolate it from further processing until deletion is possible.

7

Your Data Protection Rights

Istanbul Sandhurst respects your privacy and data protection rights. Here is a summary of your rights:

Access, review, or update your personal information at any time through your account. Contact us to request deletion.
Object to processing, ask us to restrict processing, or request that your data be ported to a third party.
Opt-out of marketing communications at any time using the unsubscribe link in any communication or via your profile settings.
Withdraw consent at any time where we process your information on the basis of consent, without affecting prior lawful processing.
Complain to a data protection supervisory authority about our collection and use of your personal information.

We respond to all requests from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

8

Updates to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we do, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material changes where required by applicable data protection laws.

We encourage you to periodically review this page for the latest information on our privacy practices.

9

How to Contact Us

The data controller is Istanbul Sandhurst and the data processor is OrderSense, who looks after our website and app functions.

If you have any questions or concerns about this Privacy Policy, please contact us:

72 High Street, Sandhurst, GU47 8ED
01252 871919