privacy policy.

This policy explains how Rowda Group Ltd, trading as Chaiiwala, looks after personal data collected through www.chaiiwala.co.uk, our catering and franchise enquiry forms, our newsletter, and any other channel we offer that sits under the chaiiwala.co.uk domain. It is written to align with the UK GDPR and the Data Protection Act 2018.

who we are

Rowda Group Ltd, trading as Chaiiwala, is the data controller for the data described here. Chaiiwala is a registered trademark of Rowda Group Ltd. Registered office: 90 Freemens Common Road, Leicester, England, LE2 7SQ. For anything on this page, email privacy@chaiiwala.co.uk.

what we collect

• Enquiry data: name, email, phone, message body and any extra fields on our contact, catering, franchise and press forms.
• Newsletter: email address, optionally a name, and any preferences you tell us about.
• Order data: captured by our third-party ordering partner when you order online. We don’t hold your card details ourselves.
• Analytics: anonymised usage data so we can understand which pages, products and stores you’re looking at.
• Technical logs: IP address, user agent and request timing, kept short-term to keep the site healthy and secure.

why we collect it

We rely on the following lawful bases:

• Contract: to answer enquiries you send us and fulfil orders you place.
• Legitimate interests: to keep the site secure, improve it, and respond to general business correspondence.
• Consent: for the newsletter and for analytics / marketing cookies. You can withdraw consent at any time without affecting what you’ve already received.
• Legal obligation: when we have to retain or disclose data to meet a regulatory or statutory duty.

how long we keep it

• Enquiry data: 24 months after the last meaningful contact.
• Newsletter list: until you unsubscribe.
• Catering & events: 7 years from the date of the event, to meet our tax and audit obligations.
• Analytics: 26 months in aggregate form.
• Server logs: 30 days.

who we share it with

We use trusted processors to run the business. They only get the data they need, only do what we’ve agreed they can do, and are bound by data-processing agreements that meet UK GDPR standards:

• Hosting & CMS: Vercel Inc., Supabase Inc.
• Ordering: our online ordering partner (current partner shown at checkout).
• Email: transactional email provider for form acknowledgements and newsletter delivery.
• Analytics: Vercel Web Analytics and (with your consent) Google Analytics 4.

We do not sell your data, ever. We do not transfer your data outside the UK / EEA unless the destination has an adequacy decision or appropriate safeguards (Standard Contractual Clauses) are in place.

your rights

Under UK GDPR you can:

• Access a copy of the data we hold about you.
• Correct anything that’s wrong.
• Ask us to delete it (right to be forgotten).
• Restrict or object to a particular use.
• Receive a portable copy.
• Withdraw consent for newsletter or marketing without affecting earlier processing.
• Complain to the Information Commissioner’s Office (ICO), ico.org.uk, though we’d appreciate the chance to fix it first.

Email privacy@chaiiwala.co.uk to exercise any of these. We respond within one month.

cookies

See our cookie policy for the cookies this site uses and how to control them.

changes

If we update this policy we’ll change the “last updated” date at the top. Material changes are flagged in the newsletter or via a banner on the site.