Privacy Policy

Last updated: May 2025

This policy explains what personal information Crust Bros Birstall collects when you use our website, place an order or create an account — and what we do with it. We keep it simple and honest.

1. Who we are

Crust Bros Birstall is the data controller for the personal information collected through this website.

• Location: Birstall Garden Centre, Leicestershire
• Email: hello@crustbros.co.uk
• Phone: 0116 200 0000

2. What data we collect and why

Data	Why we collect it	Legal basis
Name & phone number	To process your order and contact you if there is a problem with it	Contract performance
Email address	To create and manage your account	Contract performance
Order history	To show you your past orders and run the loyalty scheme	Contract performance / Legitimate interest
Loyalty points record	To track your progress toward a free pizza and record any rewards redeemed	Contract performance
Marketing opt-in	To send you occasional news and offers from Crust Bros — only if you ticked the box at signup	Consent
Notes on orders	Allergies, special requests or anything else you type into the notes field	Contract performance / Vital interests (allergy safety)

We do not collect location data, browsing history, or any information beyond what is listed above.

3. How long we keep your data

• Your account — kept until you delete it. You can do this any time from your account page.
• Order records — kept for up to 6 years for business accounting purposes. When an account is deleted, orders are anonymised (your name and contact details are removed) but the order totals remain for our records.
• Loyalty ledger — deleted when your account is deleted.
• Marketing consent — kept until you withdraw it.

4. Who we share your data with

We do not sell your data. We do not share it with third parties for marketing purposes.

Your data is stored in a database on our hosting provider (IONOS). IONOS operates within the UK and EU and is GDPR-compliant. Beyond that, your data stays with us.

5. Cookies and tracking

We use a single session cookie to keep you logged in to your account while you browse. It is deleted when you close your browser or sign out. We do not use any advertising, analytics or third-party tracking cookies.

6. Your rights

Under UK GDPR you have the right to:

• Access — ask for a copy of the personal data we hold about you
• Correction — ask us to correct anything that is wrong
• Deletion — delete your account and data at any time from your account page, or contact us and we will do it for you
• Withdraw marketing consent — contact us and we will stop sending you marketing emails immediately
• Portability — ask for your data in a machine-readable format
• Object — object to processing based on legitimate interest

To exercise any of these rights, email us at hello@crustbros.co.uk or call 0116 200 0000. We will respond within 30 days.

7. How we protect your data

• All passwords are hashed — we cannot see your password, only you know it
• The site runs over HTTPS — your data is encrypted in transit
• Database credentials are stored outside the public web folder
• No payment card data is ever stored on our systems

8. Children

Our website and loyalty scheme are not directed at children under 13. We do not knowingly collect data from under-13s. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would always prefer you to contact us first so we can try to resolve it directly.

10. Changes to this policy

If we make significant changes to this policy we will update the date at the top of this page. We will not reduce your rights without letting you know.