Privacy Policy

For the Paella Pals website and catering services
Paella Pals is operated by The Feeder Ltd
Company number: 16792979
Registered office: 33 Rashleigh Avenue, Saltash, PL12 4NS

Last updated: May 2026

This Privacy Policy explains how Paella Pals collects, uses, stores and protects personal data when you visit our website, contact us, request a quote, make a booking or use our catering services.

Paella Pals is operated by The Feeder Ltd. For the purpose of data protection law, The Feeder Ltd is the data controller responsible for the personal data described in this Privacy Policy.

1. Who we are

Paella Pals provides live paella catering and related event catering services for weddings, private celebrations, company events and special occasions.

If you have any questions about this Privacy Policy or how we use personal data, you can contact us at:

Email: info@paellapals.co.uk

2. Personal data we may collect

We may collect and use the following types of personal data:

1. your name;

2. your email address;

3. your phone number;

4. your event date;

5. your event location or venue address;

6. your event type;

7. your approximate or confirmed guest numbers;

8. your menu preferences and catering requirements;

9. allergy, intolerance, dietary or health-related information relevant to the event;

10. messages sent through our website, email, phone, WhatsApp, social media or other communication channels;

11. payment and billing information;

12. information needed to prepare quotes, invoices and booking records;

13. photographs or videos from events, where relevant;

14. website and technical information, such as cookies, IP address, device type, browser type, pages visited and website usage data, including information collected through Google Analytics where enabled.

We only ask for information that is relevant to responding to your enquiry, preparing a quote, managing a booking or delivering our service.

3. How we collect personal data

We may collect personal data when you:

1. visit our website;

2. complete a website form;

3. contact us by email, phone, WhatsApp, text message or social media;

4. request a quote;

5. make a booking;

6. provide event, guest, menu, allergy or dietary information;

7. pay a deposit, invoice or balance;

8. subscribe to updates or marketing communications, if available;

9. leave a review, testimonial or comment;

10. attend an event where we provide catering services.

We may also receive relevant event information from wedding planners, venues, event organisers or other people acting on your behalf.

4. How we use personal data

We may use personal data to:

1. respond to enquiries;

2. prepare quotes and proposals;

3. check availability;

4. manage bookings;

5. plan menus, quantities, staffing and logistics;

6. manage dietary requirements, allergies and food safety considerations;

7. coordinate event details with clients, venues, planners or suppliers;

8. issue invoices, payment requests and booking records;

9. process deposits, balances and payments;

10. provide catering services at events;

11. respond to questions, complaints or service issues;

12. keep business, accounting and tax records;

13. improve our website, services and client experience;

14. send service-related communications about your enquiry or booking;

15. send marketing communications, where we have the appropriate permission or lawful basis to do so;

16. use event photos, videos, reviews or testimonials for marketing where appropriate and consistent with this Privacy Policy and our Terms and Conditions;

17. protect our business, website, equipment, staff, clients and legal rights.

5. Lawful bases for using personal data

We only use personal data where we have a lawful basis to do so. Depending on the situation, we may rely on one or more of the following lawful bases:

Contract

We use personal data where it is necessary to respond to your request, prepare a quote, manage a booking, take payment or deliver the catering service you have asked for.

Legitimate interests

We may use personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This may include managing enquiries, improving our services, keeping business records, protecting our business, responding to reviews or complaints and using limited event photography of food, setup, team and general atmosphere.

Legal obligation

We may use and keep personal data where we need to comply with legal, tax, accounting, food safety, insurance or regulatory obligations.

Consent

We may rely on consent for optional marketing communications, certain cookies, newsletter subscriptions, or specific uses of identifiable images where consent is appropriate.

You can withdraw consent at any time where we rely on consent.

Explicit consent for allergy, dietary or health-related information

Some allergy, intolerance, dietary or health-related information may reveal health information. Where this applies, we will process it carefully and only where needed to plan and deliver the catering service safely.

If you provide allergy, dietary or health-related information about another guest, you must ensure you have their permission to share that information with us.

6. Allergy, dietary and health-related information

We may process allergy, intolerance, dietary or health-related information where this is provided to us for the purpose of preparing and delivering catering services safely.

Please only provide information that is relevant to the event. We do not need unnecessary medical details.

Where possible, dietary information should be provided clearly and in writing before the event, in line with our Terms and Conditions.

We may share relevant allergy or dietary information with our team, assistants, subcontractors or suppliers where necessary to provide the service safely. We will only share the information needed for that purpose.

7. Photos, videos, reviews and testimonials

We may take and use photographs or videos of our food, setup, equipment, team and general event atmosphere for marketing, website, social media, portfolio and commercial purposes, unless you ask us not to in writing before the event.

We will not intentionally use close-up images of identifiable guests, children or private moments without specific permission.

If you provide a review, testimonial, comment or other feedback, we may use it on our website, social media, proposals or marketing materials, unless otherwise agreed in writing.

If you want us to remove or stop using an identifiable image, review or testimonial, please contact us and we will review the request reasonably.

8. Marketing communications

We may send marketing communications, updates or newsletters where you have subscribed, requested updates or where we otherwise have a lawful basis to contact you.

You can unsubscribe from marketing communications at any time by using the unsubscribe option, replying to us, or contacting us at info@paellapals.co.uk.

We will still be able to send service-related messages about an enquiry, quote, booking, invoice or event even if you opt out of marketing communications.

9. Cookies and website data

We use cookies and similar technologies on our website. Some cookies are necessary for the website to work properly. Other cookies, such as analytics or marketing cookies, will only be used where required consent has been given.

For more information, please read our Cookie Policy.

10. Payment and billing information

We may process payment and billing information to manage deposits, balances, invoices, refunds and accounting records.

Payments may be made by bank transfer or through payment providers such as Tide or other providers we may use from time to time.

We do not intentionally store full payment card details ourselves. Where card or online payments are used, payment information may be processed by the relevant payment provider according to their own terms and privacy policy.

11. Who we may share personal data with

We may share personal data where reasonably necessary with:

1. our team members, assistants or subcontractors;

2. venues, wedding planners or event organisers involved in the event;

3. suppliers where needed to deliver the service;

4. payment providers;

5. accountants, bookkeepers or tax advisers;

6. insurers, legal advisers or professional advisers;

7. website, hosting, email, form or IT service providers;

8. spreadsheet, file storage or business administration tools;

9. analytics, advertising or cookie providers, including Google Analytics where enabled and where consent is required;

10. regulators, authorities or law enforcement where legally required.

We only share personal data where there is a valid reason to do so.

12. International transfers

Some of the service providers we use may process personal data outside the UK.

Where this happens, we will rely on appropriate safeguards or mechanisms required by data protection law, where applicable.

13. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose it was collected, including for legal, accounting, tax, insurance, food safety, complaint-handling and business record purposes.

Our usual retention approach is:

1. general enquiries that do not become bookings: up to 12 months, unless there is a reason to keep them longer;

2. booking records, invoices and accounting information: for the minimum period required for legal, tax and accounting purposes;

3. allergy, dietary or health-related information: only for as long as needed to manage the event and deal with any related issue, complaint or legal requirement;

4. marketing subscription records: until you unsubscribe or withdraw consent, plus a reasonable period to maintain suppression records;

5. reviews, testimonials, photos and marketing content: for as long as they remain relevant to our business, unless you ask us to review or remove identifiable personal data;

6. website analytics data, including Google Analytics data where enabled: according to the settings of the relevant analytics provider.

14. How we protect personal data

We take reasonable steps to protect personal data from loss, misuse, unauthorised access, disclosure or alteration.

This may include limiting access to information, using secure accounts or tools where available, keeping business records organised and only sharing personal data where needed.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

15. Your rights

Depending on the circumstances, you may have the right to:

1. access the personal data we hold about you;

2. ask us to correct inaccurate or incomplete personal data;

3. ask us to delete personal data;

4. ask us to restrict how we use personal data;

5. object to certain uses of personal data;

6. withdraw consent where we rely on consent;

7. ask for certain personal data to be transferred to you or another provider;

8. complain to the Information Commissioner’s Office.

Some rights are subject to legal limits and may not apply in every situation.

To exercise your rights, please contact us at info@paellapals.co.uk.

16. Complaints

If you are unhappy with how we use your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.

Website: https://ico.org.uk

17. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements or business operations.

The latest version will be published on this page with an updated date.