Privacy Notice
1. Who we are
Casa Corral is the controller of the personal information described in this notice.
Contact: casacorralfoods@gmail.com
2. Information we collect
When you use our website, contact us or place an order, we may collect: your name and email address; your phone number, if you choose to give it; your order details and order reference; your requested collection date and time; payment and transaction confirmation information; messages and correspondence with us; any special-request information you choose to provide; information about a food allergy or intolerance where you choose to tell us about one; and limited technical information generated when you use our website, where applicable.
We do not directly collect or store your full payment-card details where payment is handled through a third-party payment provider.
3. Why we use your information
We use personal information where necessary to: take steps to enter into and perform our contract with you, including processing and fulfilling your order; communicate with you about payment and collection; respond to questions, special requests and complaints; comply with legal, tax, accounting and food-safety obligations; keep appropriate business records; protect the security and proper operation of our website and business; and send marketing communications where we have a lawful basis to do so.
Where you voluntarily give us information about an allergy or intolerance, that information may reveal health information. We use it only so far as necessary to assess and manage your order safely. Where required, we rely on your explicit consent to process that information.
4. Who we share information with
We may share personal information with service providers where necessary to operate Casa Corral, including providers of website hosting and technical services, email services, payment processing, and professional or regulatory services where required.
We do not sell your personal information.
If a payment link takes you to a third-party payment provider, that provider will process payment information under its own privacy terms.
5. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax and food-safety requirements.
Different categories of information may therefore be kept for different periods.
6. Marketing
We will only send electronic marketing where permitted by law.
Where consent is required, you can withdraw it at any time. You can also unsubscribe from marketing communications using the unsubscribe method provided in the message or by contacting casacorralfoods@gmail.com.
Marketing consent is separate from placing an order and will not be a condition of purchasing a tortilla.
7. Your rights
Depending on the circumstances, UK data protection law may give you rights in relation to your personal information, including rights to: request access to your personal information; ask us to correct inaccurate information; ask us to delete information in certain circumstances; ask us to restrict certain processing; object to certain processing; and withdraw consent where processing is based on consent.
To exercise a right, contact casacorralfoods@gmail.com.
You also have the right to complain to the Information Commissioner's Office if you have concerns about how your personal information is used.
8. Changes to this notice
We may update this Privacy Notice from time to time. The latest version will be published on this website.