Privacy Policy

1. Introduction

Wonders by L&A ("we", "our", or "us") operates this website and food delivery service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Wonders by L&A, 5 Westfield Close, BA14 9JW
Contact: wondersbusiness@yahoo.com | 07770545465

2. Information We Collect

We collect the following personal data:

• Account Information: Name, email address, phone number
• Delivery Details: Delivery address and location data
• Order Information: Order history, food preferences, dietary requirements
• Payment Data: Payment information (processed securely by third-party payment processors)
• Communications: Reviews, ratings, and customer service interactions
• Technical Data: IP address, browser type, device information
• Marketing Preferences: Consent for promotional communications

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract Performance: To fulfill and deliver your food orders
• Legitimate Interest: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time)
• Legal Obligation: To comply with food safety and tax regulations

4. How We Use Your Information

• Process, prepare, and deliver your food orders
• Communicate order status and updates
• Send promotional emails and offers (with your consent only)
• Improve our menu, services, and customer experience
• Handle customer service inquiries and complaints
• Prevent fraud and ensure website security
• Comply with food safety and legal obligations

5. Sharing Your Information

We do not sell your personal data. We may share information with:

• Delivery Personnel: Name, phone, and delivery address (only for order fulfillment)
• Payment Processors: Secure payment handling (they have their own privacy policies)
• IT Service Providers: Website hosting and maintenance
• Law Enforcement: When legally required or to protect our rights

6. Data Retention

We retain your personal data for:

• Order Data: 7 years (for tax and accounting purposes)
• Account Information: Until you request deletion or 3 years after last activity
• Marketing Consent: Until you withdraw consent
• CCTV Footage: 30 days (if applicable at collection points)

7. Your Rights Under UK GDPR

You have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Opt-out of marketing at any time
• Right to Complain: Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise your rights, contact us at wondersbusiness@yahoo.com or call 07770545465. You can also manage your marketing consent, request a copy of your data, or request deletion directly from your Account page.

8. Cookies and Tracking

We use cookies to enhance your experience. Essential cookies are necessary for the website to function. Non-essential cookies (analytics, marketing) require your consent.

Cookie Types:

• Strictly Necessary: Session management, security (no consent required)
• Performance: Analytics to improve our service (requires consent)
• Functional: Remember your preferences (requires consent)

You can manage cookies in your browser settings or through our cookie consent banner.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. This includes encryption, secure servers, and access controls. However, no internet transmission is 100% secure.

10. International Transfers

Your data is primarily stored and processed in the UK. If we transfer data outside the UK, we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses).

11. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our website. Continued use after changes constitutes acceptance.

13. Contact & Complaints

For questions, concerns, or to exercise your rights, contact us at:

To complain to the regulator:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113