Privacy policy
How we handle personal information collected through this website and in the course of supplying our customers.
This document is a starting framework, not finished legal advice. It has been written to cover the areas a UK privacy notice is normally expected to address under the UK GDPR and the Data Protection Act 2018, so that a solicitor or a data protection adviser has something concrete to work from. It has not been reviewed by a legal professional and must not be published as-is. Every item marked [TO CONFIRM] needs a real answer, and the whole document should be checked against how the business actually operates.
Last updated: [TO CONFIRM — date]
1. Who we are
This website is operated by AL HALAL 4U LTD, trading as Al Halal 4U, a company registered in England and Wales under company number , with its registered office at 37 Maidenhall Road, Luton, Bedfordshire, England, LU4 8LA.
For the purposes of UK data protection law we are the data controller for the personal information described in this notice. You can contact us about anything in this policy by email at , by phone on , or by writing to us at the address above.
Our data protection contact is [TO CONFIRM — named contact or role]. Whether we are required to register with the Information Commissioner's Office, and our registration number if so, is [TO CONFIRM].
2. What information we collect
We collect personal information in the following ways.
Information you give us
- Enquiry and contact forms — your name, business name, business type, email address, phone number, delivery postcode, required date, the items on your enquiry list and any notes or cutting specifications you include.
- Trade account applications — the above plus your trading address, company registration number where applicable, the role of your named contact, and details of the lines and volumes you expect to order.
- Correspondence — the content of emails, WhatsApp messages, phone calls and messages you send us, and our replies.
- Ordering and account records — where you become a customer, the orders you place, delivery records, invoices and payment records.
Information collected automatically
This website is a set of static pages and does not currently use analytics, advertising or third-party tracking cookies. It stores one item of information in your own browser's local storage, described in section 7 below, which never leaves your device unless you choose to send an enquiry.
Our web hosting provider, Hostinger, will keep standard server logs which may include IP addresses and browser information. Details of what is logged and for how long are [TO CONFIRM — check with the hosting provider].
3. How we use your information, and our lawful basis
| What we use it for | Lawful basis |
|---|---|
| Responding to enquiries and providing quotations | Legitimate interests — responding to a request you have made; or steps taken at your request before entering a contract |
| Opening and administering a trade account | Performance of a contract, or steps taken before entering one |
| Taking, fulfilling and delivering orders | Performance of a contract |
| Invoicing, payment and credit control | Performance of a contract; legal obligation for accounting records |
| Food safety traceability, withdrawal and recall | Legal obligation under food safety legislation |
| Keeping business and accounting records | Legal obligation |
| Sending marketing about our products, if you have asked for it | Consent, or the soft opt-in for existing customers where applicable |
Where we rely on consent, you can withdraw it at any time by contacting us. Withdrawing consent does not affect processing that has already taken place.
4. Who we share it with
We do not sell personal information. We share it only where we need to, and only with:
- Our web hosting provider (Hostinger), which stores the website itself
- Our email provider, which carries our correspondence — [TO CONFIRM — provider]
- Delivery partners or carriers, where a delivery is not made on our own vehicles — [TO CONFIRM — whether any are used, and who]
- Our accountants and, where necessary, our bank and payment providers — [TO CONFIRM]
- Our halal certification body and food safety auditors, where certification or an audit requires it
- Enforcement authorities, including the Food Standards Agency and local authority environmental health, where we are required by law to provide traceability information
- Professional advisers, where necessary, and any party we are legally obliged to disclose to
Whether any of our providers process personal data outside the United Kingdom, and what safeguards apply if so, is [TO CONFIRM].
5. How long we keep it
- Enquiries that do not become customers — [TO CONFIRM — retention period]
- Customer account and order records — [TO CONFIRM]
- Accounting and tax records — normally six years plus the current financial year, as required by HMRC
- Food safety traceability records — [TO CONFIRM — must align with the retention period stated on our quality and cold chain page]
- Marketing consents — until withdrawn, and reviewed at [TO CONFIRM — frequency]
When we no longer need personal information, we delete or securely destroy it.
6. Your rights
Under UK data protection law you have the right to:
- Be told how your personal information is used — which is what this notice is for
- Ask for a copy of the personal information we hold about you
- Ask us to correct information that is wrong or incomplete
- Ask us to delete information, where we have no continuing lawful reason to keep it
- Ask us to restrict how we use it, in certain circumstances
- Object to processing carried out on the basis of our legitimate interests
- Ask for your information in a portable format, in certain circumstances
- Withdraw consent, where we rely on it
To exercise any of these rights, contact us at . We will respond within one month. There is normally no charge.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, or by calling their helpline on 0303 123 1113. We would rather you came to us first so we have a chance to put it right.
7. Cookies and local storage
This website does not currently set advertising or analytics cookies.
It does use your browser's local storage to remember the enquiry list you build as you move between pages, under the key alhalal_enquiry_v1. That entry contains only product codes and quantities. It is stored on your own device, is not transmitted to us automatically, and is not used to identify or track you. You can clear it at any time using the “Clear list” button in the enquiry drawer, or by clearing your browser's site data.
Pages that show a map embed content from Google Maps. When a map loads, Google may set cookies and receive your IP address. That is governed by Google's privacy policy. If a cookie consent banner is added to this site in future, it should cover this embed — [TO CONFIRM — take advice on whether a consent banner is required].
8. Security
We take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access. Our specific security measures are [TO CONFIRM]. No transmission over the internet can be guaranteed completely secure, and any transmission is at your own risk.
9. Children
This website and our services are directed at businesses and adults. We do not knowingly collect personal information from children.
10. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed. Where a change is significant we will make that clear.
Have this document reviewed by a solicitor or data protection adviser, replace every [TO CONFIRM], confirm whether ICO registration is required, confirm what your hosting and email providers log and where, and check whether a cookie consent banner is needed for the map embed.