Privacy Policy

Who controls your data

JOARR HOT FOOD EMPORIUM LIMITED (company number 10283868) of 139 Bispham Road, Southport, PR9 7BL, trading as Jo Kelly's, is the data controller for personal data collected through this site.

What we collect and why

• Account details — name, email, password (stored hashed, never in readable form). Needed to operate your account. Lawful basis: contract.
• Order details — items, delivery address, order history. Needed to fulfil and support your order. Lawful basis: contract.
• Age verification — your name, date of birth and postcode are sent to our age-verification provider to confirm you are 18 or over. We store only the outcome of that check and the method used. Lawful basis: legal obligation (licensing law).
• Delivery ID checks — when our rider performs a Challenge 25 check, we record only the outcome (passed on appearance, passed on ID, or refused). We do not photograph, scan, copy or retain your ID document.
• Payment — handled by Stripe. We receive confirmation of payment and a reference; we never receive or store your full card number.

Who we share it with

Only with providers who need it to deliver the service: Supabase (database and authentication, EU region), Stripe (payments), our age-verification provider, our email provider for order confirmations, and our delivery riders — who see the delivery name, address and items, and nothing more. We do not sell your data or use it for advertising.

How long we keep it

• Order and transaction records — six years, as required by tax law.
• Age-verification and Challenge 25 outcomes — retained as licensing evidence, then routinely purged.
• Account details — until you ask us to close your account.

Your rights

Under UK GDPR you may request a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and request it in a portable format. Some data we must keep — we cannot delete records the law requires us to hold, such as transaction records and licensing evidence.

To exercise any of these, contact us through this site. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use only cookies that are necessary for the site to work — keeping you signed in and remembering your basket. We do not use advertising or third-party tracking cookies.

Security

Data is transmitted over HTTPS and held in access-controlled systems with row-level security. Staff and rider accounts are issued individually and carry only the access their role requires.

Changes

We will update this page if our practices change, and revise the date at the top.