Privacy notice

Who we are

Midland Catering Ltd (company number 09995085), Unit 3, Landor Street, Saltley, Birmingham B8 1AG, is responsible for the personal information described here. We are the “data controller” under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Questions or requests about your information: email midlandcateringltd@hotmail.com, call 0121 773 4778, or write to us at the address above.

What we collect

When you send an enquiry through this website we collect what you type into the form:

• your name, phone number and email address;
• your event details: type of event, date, number of guests, venue, how you would like it served and any extras;
• dietary requirements and anything else you choose to tell us;
• the date and time you agreed to this notice, and your device’s IP address, which we use to stop spam.

If you book with us we also keep the details of your order, what you paid and when, and the invoices we send you. We do not collect payment card details through this website.

Dietary requirements can include allergy or health information. We only use it to prepare food that is safe for your guests. Please give numbers (for example “4 nut allergies”) rather than naming individuals.

Why we use it, and our lawful basis

• To reply to your enquiry and quote for your event: steps you have asked us to take before entering a contract.
• To cater your event: performing our contract with you.
• To keep order, payment and invoice records: our legal obligation to keep business and tax records.
• To protect the website from spam and misuse: our legitimate interests.
• Allergy and health information: your explicit consent, given when you write it in. You can withdraw it at any time.

We do not sell your information, use it for advertising, or send you marketing without asking first.

Who we share it with

Only where needed to run the business:

• the company that hosts this website and its database;
• our accountant, and HMRC or other authorities where the law requires it;
• Google, only if you choose to load the map on our website (see our cookie policy).

If any information is processed outside the UK, we make sure suitable safeguards are in place, as UK GDPR requires.

How long we keep it

• Enquiries that do not become a booking: up to 2 years from the enquiry, then deleted.
• Orders, payments and invoices: 6 years from the end of the tax year they relate to, as HMRC requires.

Keeping it safe

The website uses an encrypted connection (HTTPS). Only our managing team can sign in to see enquiries and orders, each with their own password and optional two-step sign-in. Prices and payments are restricted to management.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your information, or to stop or limit using it;
• object to how we use it, or ask for it in a format you can take elsewhere;
• withdraw consent you have given, at any time.

Contact us using the details above. We will reply within one month. Some records, such as invoices, we must keep by law even if you ask us to delete them; we will tell you if that applies.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.

Changes to this notice

If we change how we use your information we will update this page and the date at the top.