Privacy Policy.

Joanna's Chippy Van ("we", "us", "our") operates this website and provides mobile fish & chip catering across Ayrshire and the wider Scotland area. We are the data controller responsible for the personal information described in this policy.

If you have any questions, you can reach us at info@joannaschippy.com.

We only collect information you give us directly. Depending on how you interact with us this may include:

• SMS alerts sign-up: first name, mobile phone number, council area, town, the date and time you gave consent, and the IP address used to submit the form.
• Email alerts (optional): if you choose to add it, your email address is stored alongside your SMS subscription.
• Contact form / enquiries: your name, email address, phone number (if provided) and the contents of your message.
• Bookings & events: contact details, event date, location and any details you share so we can prepare a quote.
• Technical data: standard server logs (IP, browser type, pages visited) used to keep the site secure and reliable.

We do not collect payment card details on this website.

When you sign up for our weekly schedule alerts you are giving us express written consent to send you marketing text messages about where the van will be, special offers and seasonal news. We record:

• The phone number you provided
• The exact date and time you submitted the form
• The IP address you submitted from
• The version of the consent wording you agreed to

We send messages using a UK-based SMS provider (ClickSend). Messages are sent from a recognisable sender ID and standard network rates apply — we never charge you for receiving a message.

Stopping messages: the easiest way to opt out is the one-tap link included at the end of every text we send you (joannaschippy.com/sms?u=…) — open it and tap "Unsubscribe me" and you'll be removed instantly. You can also visit joannaschippy.com/sms at any time and enter your number manually, or email us and we'll remove you by hand.

We do not share, sell or rent your phone number to any third party for their own marketing.

We use your information to:

• Send the SMS schedule alerts you've signed up for
• Reply to enquiries, bookings and event quotes
• Confirm your contact form submission by email
• Keep records required for accounting and tax purposes
• Improve and secure the website

• Consent — for SMS marketing and any optional email updates.
• Legitimate interests — to respond to enquiries, reply to messages you send us, and to keep our website secure.
• Contract — when you book us for an event, to plan and deliver that booking.
• Legal obligation — to keep accounting records as required by HMRC.

We only share data with trusted suppliers who help us run the service. These currently include:

• ClickSend — to deliver SMS messages.
• Lovable Cloud (powered by Supabase) — for secure database hosting and email delivery, located within the EU/UK.
• Google Maps — to display van locations on the Find Us page.

Each supplier is bound by their own data processing agreement and only processes data on our instructions.

• SMS subscribers: until you unsubscribe, plus a short audit period to evidence your consent.
• Contact / enquiry messages: up to 24 months after our last contact with you.
• Booking & invoice records: 6 years to comply with UK accounting law.
• Server logs: typically 30 days.

This website uses a small number of essential cookies needed for it to work properly (for example to remember your form input). We do not use advertising or third-party tracking cookies.

Anonymous usage statistics are collected to help us understand how the site is used and to fix problems. No personally identifiable information is shared with third parties for advertising.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data ("right to be forgotten")
• Withdraw consent at any time (e.g. STOP for SMS)
• Object to or restrict certain processing
• Receive a copy of your data in a portable format

To exercise any of these rights, email info@joannaschippy.com. We'll respond within 30 days.

If you're unhappy with how we've handled your data you can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Your data is stored in encrypted databases hosted within the UK/EU. Access is restricted to authorised staff only. The website is served over HTTPS.

Our services are aimed at adults. We do not knowingly collect data from anyone under the age of 16. If you believe a child has submitted information, contact us and we'll delete it.

We may update this policy from time to time. The "last updated" date at the top will always reflect the latest version. Material changes affecting SMS subscribers will be communicated by text where appropriate.

Questions, requests or complaints about this policy:

Joanna's Chippy Van
Email: info@joannaschippy.com
Web: joannaschippy.com