Privacy Policy

Pearl's Afri-Kitchen is the data controller for the personal information collected through this website. We are based at 27 Lime Kiln Gardens, Bradley Stoke, BS32 0DB, United Kingdom. If you have any questions about how we handle your data, please contact us at hello@pearlsafrikitchen.com.

We collect the following personal data from you:

• Account information: your name and email address, provided when you create an account via Clerk authentication.
• Order information: delivery address, phone number, order items, and any special notes you provide when placing an order.
• Usage data: information about how you use our website, collected automatically (such as pages visited and device type). This data is anonymous and used solely to improve our service.
• Communications: any messages you send us via email or phone.

We do not collect or store payment card details. All payments are handled on delivery or via secure third-party methods.

We use your personal data to:

• Process and fulfil your orders.
• Contact you by phone or email to confirm your order or arrange delivery.
• Send you transactional emails, such as order confirmations and status updates.
• Maintain records of your order history in your account.
• Improve our website, menu, and overall service.
• Comply with legal obligations.

We will not use your data for unsolicited marketing without your explicit consent.

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Contract performance: processing your orders and delivering your food.
• Legitimate interests: improving our service, preventing fraud, and communicating with customers about their orders.
• Legal obligation: retaining records as required by law (for example, for accounting purposes).

We do not sell, rent, or trade your personal data. We may share your data only with:

• Clerk:our authentication provider, which manages your account login. Clerk’s privacy policy is available at clerk.com/privacy.
• Resend:our email delivery provider, used to send transactional emails. Resend’s privacy policy is available at resend.com/privacy.
• Cloudinary: our image hosting provider. Images you view are served from Cloudinary servers.
• Law enforcement or regulators: where we are required to do so by law.

All third-party providers are selected carefully and are required to handle your data in accordance with applicable data protection law.

We retain your personal data for as long as necessary to:

• Maintain your account and order history.
• Comply with legal and accounting obligations (typically 6 years under UK law).

If you request deletion of your account, we will remove your personal data except where retention is required by law. Order records may be retained in an anonymised form.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: to request a copy of the data we hold about you.
• Right to rectification: to correct inaccurate or incomplete data.
• Right to erasure:to request deletion of your data (“right to be forgotten”), subject to legal obligations.
• Right to restrict processing: to ask us to limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests.

To exercise any of these rights, contact us at hello@pearlsafrikitchen.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Our website uses essential cookies required for authentication and session management (provided by Clerk). These cookies are strictly necessary for the website to function and do not require your consent.

We do not currently use tracking, advertising, or analytics cookies. If this changes in the future, we will update this policy and seek your consent where required.

We take the security of your personal data seriously. Our website uses HTTPS encryption, secure authentication (Clerk), and access controls to protect your information. However, no method of internet transmission is completely secure, and we cannot guarantee absolute security.

We may update this privacy policy from time to time. The “last updated” date at the top of this page will reflect any changes. We encourage you to review this policy periodically.