Privacy Policy
Mama’s African Kitchen
Last Updated: October 2, 2025
Mama’s African Kitchen (“we”, “our”, “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, protect, and share your data in compliance with the UK GDPR, the EU GDPR (where applicable), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
By using www.mammasafricankitchen.co.uk.co.uk, placing an order, or contacting us, you agree to this Privacy Policy.
- Who We Are (Data Controller)
Mama’s African Kitchen
257 High St,
Birmingham B23 6SR,
United Kingdom
Phone: +44 7308 721192
Email: sales@mammasafricankitchen.co.uk
Website: www.mammasafricankitchen.co.uk.co.uk
For data protection purposes, Mama’s African Kitchen is the Data Controller responsible for your personal information.
If you are located in the EU and order from us online, we process your data in line with the EU GDPR.
- What Personal Data We Collect
We collect the following categories of data:
- Information You Provide
- Name
- Email address
- Phone number
- Delivery address
- Payment information (processed by PCI-compliant third-party payment processors; we do not store card details)
- Information submitted through forms, email, WhatsApp, or customer service interactions
- Automatically Collected Data
Using cookies and analytics tools, we may collect:
- IP address
- Location approximations
- Browser and device details
- Pages visited and time spent on the site
- Click behaviour and order interactions
- Data From Third Parties
- Payment processors (payment confirmation only)
- Delivery and courier partners
- Reservation or ordering platforms (if used)
- Social media interactions (Instagram, Facebook, WhatsApp, etc.)
- Lawful Basis for Processing (UK & EU GDPR)
We process your data using these lawful bases:
✔ Contract
To fulfil orders, process payments, and provide customer service.
✔ Legitimate Interest
To improve our website, prevent fraud, ensure security, and maintain business operations.
✔ Consent
For marketing emails, SMS, or newsletters.
You may withdraw consent at any time.
✔ Legal Obligation
For tax, accounting, fraud prevention, and compliance with UK or EU authorities.
- How We Use Your Information
We use your information to:
- Process and deliver your orders
- Contact you about your order or enquiries
- Manage payments and refunds
- Improve our services, menu, and customer experience
- Maintain website functionality and security
- Send marketing messages only if you opt-in
- Comply with regulatory requirements (UK & EU law)
- How We Share Your Information
We only share your data when necessary, and always securely, with:
- Payment processors (e.g., Stripe, PayPal, banks)
- Delivery partners and drivers
- IT service providers (hosting, security, email service providers)
- Analytics services (e.g., Google Analytics)
- Legal or regulatory bodies when required by law
We do NOT sell or rent your data to any third party.
All third-party partners are required to follow UK GDPR and EU GDPR standards.
- Cookies & Tracking (PECR Compliant)
Our website uses cookies to:
- Operate basic site functions
- Improve performance and analytics
- Enhance checkout and ordering
- Personalise user experience
Cookie Consent
Under PECR and GDPR, you will see a cookie banner allowing you to accept or manage cookie preferences.
You may disable cookies in your browser at any time.
- International Data Transfers
If data is transferred outside the UK or EU (for example, to cloud or email providers):
- Transfers are protected using UK-approved safeguards, such as Standard Contractual Clauses (SCCs).
- We ensure the receiving country provides adequate data protection.
- Data Security
We use appropriate technical and organisational measures including:
- SSL encryption
- Secure servers
- Access controls
- Regular security monitoring
- Third-party PCI-compliant payment gateways
No online system is 100% secure, but we follow best practices.
- Data Retention
We keep your data only for as long as necessary:
- Order and transaction records: 6 years (legal requirement)
- Marketing data: until you withdraw consent
- Account information: until your account is deleted
- Email enquiries: up to 12 months
You may request deletion earlier where allowed by law.
- Your Rights (UK & EU Residents)
You have the right to:
- Access your data (“Subject Access Request”)
- Correct inaccurate data
- Request deletion (“Right to Be Forgotten”)
- Limit or object to processing
- Withdraw marketing consent
- Request data portability
- Lodge a complaint with a supervisory authority
UK Complaints:
Information Commissioner’s Office (ICO): www.ico.org.uk
To exercise any rights, email:
sales@mammasafricankitchen.co.uk
- Third-Party Links
Our website may link to external sites.
We are not responsible for their privacy practices.
- Changes to This Policy
We may update this Privacy Policy at any time to reflect changes in the law or business operations. The latest version will always be available on this page.
- Contact Us
For privacy concerns, requests, or clarifications:
Mama’s African Kitchen
Email: sales@mammasafricankitchen.co.uk
Phone: +44 7308 721192
Website: www.mammasafricankitchen.co.uk.co.uk