Legal
What personal information we collect, why, and the choices you have.
Chef Hospitality Partners Ltd is the controller of the personal data described here. We are registered in England and Wales, company number [to add], registered office [registered office address]. We are registered with the Information Commissioner’s Office under reference [to add].
For anything about your data, email hello@chefhospitalitypartners.co.uk with “Privacy” in the subject line.
• From you, when you contact or book with us: your name, business, role, email address, phone number and what you tell us.
• When we work together: menus, recipes, invoices, rotas, sales and cost figures. This is mostly business information, but it can include personal data, such as staff names on a rota or training records.
• Client and supplier records: contact details, contracts, invoices and payment records.
• From credit reference agencies: for procurement accounts, credit information about your business and, if you are a sole trader, partner or guarantor, about you.
• Market note: your email address and, if you choose, your name and type of business.
• Website use: pages visited, device and browser type and approximate location, collected through cookies as explained in our cookie policy.
We do not ask for sensitive information such as health details. Please do not send it to us.
Replying to enquiries and arranging calls
Legitimate interests: responding to people who contact us. Also steps before a contract.
Providing our services and managing accounts
Contract
Credit checks and debt recovery for procurement accounts
Legitimate interests: managing credit risk
Sending the monthly market note
Consent, which you can withdraw at any time
Telling existing clients about similar services
Legitimate interests, with an opt-out in every message
Accounting, tax and food traceability records
Legal obligation
Measuring how the website is used
Legitimate interests, under the statistical purposes exception, with an opt-out
Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details. We do not make decisions about you by automated means alone.
We only send the market note if you sign up and confirm your email address. Each issue has an unsubscribe link, and you can also email us to stop it. We do not track whether individual subscribers open or click our emails. We never sell or share our mailing list.
Before opening a procurement account, we search the records of a credit reference agency. The agency will record the search. It does not affect your credit score for other lenders. Credit reference agencies explain how they use data in their Credit Reference Agency Information Notice, at experian.co.uk/legal/crain. [Confirm the agency used.]
• Service providers who process data for us: website hosting ([host]), booking tool ([Calendly or Cal.com]), email ([Microsoft 365 or Google Workspace]), newsletter ([provider]) and accounting software (Xero).
• Suppliers: only when we manage procurement for you, and only what they need to make deliveries.
• Credit reference agencies, for procurement accounts.
• Professional advisers: our accountant, solicitor and insurers.
• Authorities: regulators, local authorities or law enforcement where the law requires it, for example during a food safety investigation or product recall.
We never sell personal data.
Some providers store data outside the UK, for example in the European Economic Area or the United States. Where they do, the data is protected by UK adequacy regulations (including the UK–US data bridge for certified US companies) or by the UK International Data Transfer Agreement or Addendum.
Enquiries that do not lead to work
24 months after the last contact
Client, supplier and account records
6 years after the end of the financial year in which the relationship ends
Credit check results
For the life of the account, then 6 years
Market note subscribers
Until you unsubscribe, then a suppression record so we do not email you again
Website statistics
[14 months]
We limit access to people who need it, use multi-factor authentication and encryption where available, and choose providers with recognised security standards. If a breach puts your rights at risk, we will tell you and the ICO as the law requires.
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, object to how we use it or move it to another organisation. You can object to marketing at any time, and we will stop. Email us and we will reply within one month. We will only ask for identification if we genuinely need it to confirm who you are.
We use cookies as explained in our cookie policy.
If you are unhappy with how we have handled your data, please tell us first through our complaints page or by email. We will acknowledge your complaint within 30 days, look into it without delay and tell you the outcome. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
We will update this page if the way we handle personal data changes. The date at the top shows the latest version.
