This policy explains how Covent Garden Catering by Plattaire (“we”) handles personal data collected through www.coventgardencatering.com. It reflects how the site is built today. We do not invent retention periods or consent mechanisms that are not implemented.
Who to contact
For privacy questions, email orders@coventgardencatering.com. We operate from 17 The Market, Covent Garden, London WC2E 8RB.
What we collect through enquiry forms
When you submit a catering request we may collect:
- Name, company, work email and phone number
- Delivery address, postcode and preferred delivery window
- Order selections, headcount notes and dietary requirements
- Any other notes you choose to include
In-progress form data may also be saved in your browser's local storage on your device until you submit successfully or clear it.
Purposes and lawful basis
We use this information to:
- Respond to your enquiry and check delivery availability
- Confirm orders, arrange delivery and communicate about your booking
- Send a short acknowledgement email when a request is received
- Notify our operations team so they can fulfil the request
For booking enquiries this is typically necessary for steps prior to entering a contract, or our legitimate interests in operating an office catering service and preventing abuse of the form (including basic rate limiting and origin checks on the server).
Contact and order communications
Operational emails are sent using our email provider (Resend). Messages about your request may go to our operations inbox and to the email address you provide. Payment links, when issued, are sent from our public orders address.
Analytics and cookies
If Google Analytics (GA4) is enabled via our site configuration, we use it to understand how visitors use the site (for example pages viewed). Analytics cookies are controlled through your browser settings. If GA is not configured in the environment, that script is not loaded.
Hosting, email and security tooling
- Vercel hosts this website and processes HTTP requests needed to serve pages and APIs.
- Resend sends transactional enquiry and acknowledgement emails.
- Supabase may store a secure backup of submitted booking requests when database credentials are configured. If not configured, submissions still go through email.
- Cloudflare Turnstile (or reCAPTCHA) may be used for bot protection when site and secret keys are configured. The site includes a placeholder for this; verification is only enforced when those keys are present and wired. We do not claim an always-on CAPTCHA experience.
Retention
We keep enquiry and order communications for as long as needed to fulfil your request, handle follow-up questions, and meet ordinary business and accounting needs. Browser local storage drafts remain on your device until cleared. We have not published a fixed automated deletion schedule in this application; if you want data removed from our systems where we hold it, contact us at orders@coventgardencatering.com.
Sharing and international processing
We share data with service providers only as needed to run the site and fulfil orders (hosting, email delivery, and optional database backup). Those providers may process data in the UK, EEA or other countries where they operate. We do not sell your personal data.
Your rights (UK)
Depending on applicable UK data protection law, you may have rights to access, rectify, erase or restrict certain personal data, to object to certain processing, and to complain to the Information Commissioner's Office (ICO). To exercise rights in relation to data we hold, email orders@coventgardencatering.com.