British Curry Network ("BCN", "we", "us", or "our") operates the British Curry Network website and mobile applications (together, the "Service"). This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
Information you provide
- Account data: name, email address, phone number, password (stored encrypted), and account role (e.g. restaurant owner, job seeker).
- Profile & listing content: business details, restaurant information, job postings, marketplace listings, job applications, CVs, images, and any other content you submit.
- Communications: messages you send through the Service and enquiries you send to our team.
- Payment data: membership purchases are processed by our payment provider (Stripe). We do not store your full card details on our servers.
Information collected automatically
- Usage data: pages viewed, features used, and actions taken within the Service.
- Device & technical data: IP address, device type, operating system, and app version.
- Cookies and similar technologies used to keep you signed in and to operate the Service (see Section 8).
2. How We Use Your Information
- To create and manage your account and authenticate you.
- To provide the Service — listing restaurants and jobs, enabling applications, messaging, the marketplace, and memberships.
- To process membership payments and send related receipts.
- To send service-related communications, including email verification, password resets, and important notices.
- To respond to your enquiries and provide support.
- To maintain security, prevent fraud and abuse, and comply with our legal obligations.
3. Legal Bases for Processing
We rely on the following legal bases under UK GDPR: performance of a contract (to provide the Service you sign up for); your consent (where requested, such as optional communications); our legitimate interests (to operate, secure, and improve the Service); and compliance with legal obligations.
4. How We Share Information
We do not sell your personal data. We share information only as needed to operate the Service:
- Publicly visible content: information you choose to publish (such as restaurant listings, job postings, and marketplace items) is visible to other users and visitors.
- Service providers: hosting, payment processing (Stripe), and email delivery providers who process data on our behalf under appropriate agreements.
- Legal requirements: where required by law or to protect our rights, users, or the public.
5. Data Retention
We keep your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your personal data within 30 days, except where we are required to retain certain records (for example, transaction records for tax and accounting purposes) for the period required by law.
6. Your Rights
Subject to applicable law, you have the right to access, correct, update, or delete your personal data, to object to or restrict certain processing, and to request a copy of your data in a portable format. You may exercise most of these rights from within your account settings, or by contacting us.
Deleting your account: you can request deletion of your account and associated personal data at any time. See our Account Deletion page for details and to submit a request.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
7. Data Security
We use technical and organisational measures to protect your data, including encrypted passwords, encrypted connections (HTTPS), and access controls. No method of transmission or storage is completely secure, but we work to protect your information and review our measures regularly.
8. Cookies
We use essential cookies and similar technologies to keep you signed in and to operate core features of the Service. These are necessary for the Service to function. We do not use them to sell your data.
9. Children's Privacy
The Service is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
10. International Transfers
We are based in the United Kingdom. Where data is processed outside the UK by our service providers, we take steps to ensure it receives an adequate level of protection in line with UK GDPR.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Significant changes may be communicated through the Service.
12. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at privacy@britishcurrynetwork.co.uk or info@britishcurrynetwork.co.uk.