GDPR Compliance

Our Commitment to Data Protection

Verdant Rain Culinary Services is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we protect your personal data.

Data Controller

Verdant Rain Culinary Services acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.

Contact details:
Verdant Rain Culinary Services
47 Rosemary Lane
Cirencester, Gloucestershire
GL7 2PQ
Email: [email protected]

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request a copy of the personal information we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond within one month of receiving your request.

Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You can request that we limit how we use your personal data while we verify its accuracy or while you exercise other rights.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently use automated decision-making.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: Processing necessary to perform our contract with you, such as delivering booked services
• Consent: Where you have given clear consent for us to process your data for specific purposes, such as marketing communications
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these are not overridden by your rights
• Legal Obligation: Processing necessary to comply with legal requirements, such as tax regulations

Data We Collect

We collect and process the following categories of personal data:

• Identity data: Name, title
• Contact data: Email address, postal address
• Health data: Dietary restrictions, food allergies (with explicit consent)
• Transaction data: Payment details, booking history
• Technical data: IP address, browser type, device information
• Usage data: How you use our website and services

Data Security Measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit using SSL/TLS
• Regular security assessments
• Access controls and authentication
• Staff training on data protection
• Secure disposal of personal data

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods are outlined in our Privacy Policy.

International Transfers

We primarily process data within the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK authorities.

Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, inform you directly.

Exercising Your Rights

To exercise any of your rights, please contact us at [email protected]. We may need to verify your identity before processing your request. There is no fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.

Last updated: 3 June 2026