Privacy policy
This policy explains how Maharaaj (“we”, “us”) collects and uses personal information when you use our website and online ordering service at https://www.maharaaj.co.uk/. We are the data controller for this processing.
Who we are
Maharaaj
13 High Street, Metheringham, LN4 3DZ, United Kingdom
Telephone: 01526 323525
Email: maharaj13methringham@gmail.com
For privacy questions or to exercise your rights, contact us using the email above.
What we collect and why
Website orders and checkout
When you place an order we collect the details needed to prepare and fulfil it, including your name, phone number, email address, order type (collection or delivery), delivery address where applicable, and payment handled by our payment provider. We store order details and line items in our systems so we can process, prepare, and manage your order.
Accounts
If you create an account, we store your email address, password (securely hashed), name, phone number, and address fields you provide. We use this information to run your account, speed up checkout, and to send service emails (for example email verification). We do not use your details for marketing emails unless we have separately obtained your consent to do so.
Technical and session data
Our website uses a session cookie to keep your basket, checkout state, and login session working. For more detail see our cookie policy.
Delivery distance
For delivery orders we may use your postcode to calculate distance. Our server may request postcode coordinates from the public postcodes.io API so we can work out mileage. That request is sent from our server, not your browser.
Payments
Card payments are processed by Stripe. When you pay, you are redirected to Stripe’s secure checkout pages. We do not store your full card number on our servers. Stripe processes payment data in line with its own privacy notice and acts as a separate controller or processor depending on the processing. See Stripe’s privacy policy.
Emails and notifications
We send transactional emails related to your order and account (for example order confirmations or verification) using our email systems. We do not sell your personal data.
Embedded content
Our site may load fonts from Google Fonts and display a map from Google Maps. Those providers may process technical data (such as IP address) when your browser loads their resources. See their privacy notices for details.
Legal bases (UK GDPR)
We rely on:
- Performance of a contract — to take and fulfil your orders and operate your account.
- Legitimate interests — for example running the website securely, keeping business records, and improving our service, where these interests are not overridden by your rights.
- Legal obligation — where we must retain records for tax, accounting, or other legal requirements.
- Consent — where we ask for it (for example where we rely on consent for a specific cookie or communication).
How long we keep information
We keep order and accounting records for as long as needed for our business and to meet legal requirements (including tax and accounting rules). Account information is kept while your account is active and for a reasonable period afterwards if we need to resolve disputes or meet legal obligations. You can ask us to delete or restrict certain data where applicable (see below).
Sharing and international transfers
We share data with processors who help us run the site and take payments (for example Stripe and our hosting provider). Some providers may process data outside the UK; where that happens we use appropriate safeguards such as the UK International Data Transfer Agreement or addendum, or other mechanisms permitted under UK law.
Your rights
Under UK data protection law you may have the right to:
- access your personal data;
- rectify inaccurate data;
- erase data in certain circumstances;
- restrict or object to processing in certain circumstances;
- data portability where applicable;
- withdraw consent where processing is based on consent;
- lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise your rights, contact us at the email above. We may need to verify your identity before responding.
Security
We use appropriate technical and organisational measures to protect personal data. No method of transmission over the internet is completely secure; we work to protect your information appropriately.
Children
Our online ordering is not intended for children under 13 years of age. We do not knowingly collect personal data from children.
Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Significant changes may be highlighted on the website.