Privacy Policy

Last updated: June 2026

1. Who we are

This website is operated by The Curry Bowl, a food business based in Southern Haute-Vienne, France.

Website: https://thecurrybowl.eu
Contact email: [ADD CONTACT EMAIL]
Business address: [ADD BUSINESS ADDRESS OR AREA]
SIRET / registration number, if applicable: [ADD SIRET IF AVAILABLE]

For the purposes of the General Data Protection Regulation (GDPR), The Curry Bowl is the data controller for personal data collected through this website.

2. Personal data we collect

We may collect the following information when you use our website or submit an order/contact form:

• Your name.
• Your email address.
• Your phone number.
• Your preferred drop-off point.
• Details of your order request.
• Any notes or messages you choose to send us.
• Technical information such as your IP address, browser type, device type and basic website usage data.

We ask customers not to include sensitive personal information in form submissions unless necessary.

3. Allergy information

The Curry Bowl does not cater for allergies and cannot guarantee that any food is free from allergens or traces of allergens.

If you submit information about allergies, intolerances or health-related matters, this may be considered sensitive personal data. We only use this information to understand your enquiry and to make clear that we are unable to cater for allergy-safe food requests.

4. Why we use your personal data

We use personal data for the following purposes:

• To receive and respond to order requests.
• To contact you about your order, collection details or delivery/drop-off information.
• To respond to general enquiries.
• To manage customer communication.
• To keep basic records for administration and accounting.
• To maintain the security and performance of the website.
• To comply with legal obligations.

5. Legal bases for processing

We rely on one or more of the following lawful bases under the GDPR:

• Contract or pre-contractual steps: where we process your information to respond to an order request or prepare an order.
• Legal obligation: where we need to keep certain records for accounting, tax or regulatory purposes.
• Legitimate interests: where we need to manage enquiries, protect the website, and operate our business effectively.
• Consent: where required, for example for certain cookies or marketing communications.

6. How long we keep your data

We only keep personal data for as long as necessary for the purpose for which it was collected.

• Order and enquiry messages may be kept for up to [ADD RETENTION PERIOD, E.G. 12–24 MONTHS].
• Accounting and business records may be kept for the period required by French law.
• Technical/security logs may be kept for a limited period for website security and maintenance.
• Cookie consent records may be kept to demonstrate your preferences.

7. Who we share data with

We do not sell your personal data.

We may share limited personal data with trusted service providers where necessary to operate the website and business, such as:

• Website hosting providers.
• Email delivery providers.
• Website form or security plugins.
• IT support providers.
• Accounting or professional advisers, where required.
• Google or review-related services, if Google Reviews or maps/review widgets are enabled.

These providers should only process data as needed to provide their services.

8. International transfers

Some service providers may process data outside France or the European Economic Area. Where this happens, appropriate safeguards should be used, such as European Commission Standard Contractual Clauses or equivalent lawful transfer mechanisms.

9. Your rights

Under the GDPR, you have rights over your personal data. These may include:

• The right to access your personal data.
• The right to correct inaccurate data.
• The right to request deletion of your data.
• The right to restrict processing.
• The right to object to processing.
• The right to data portability, where applicable.
• The right to withdraw consent where processing is based on consent.

To exercise your rights, contact us at: [ADD CONTACT EMAIL]

10. Complaints

If you are not satisfied with how we handle your personal data, you can contact us first so we can try to resolve the issue.

You also have the right to complain to the French data protection authority, the CNIL: www.cnil.fr

11. Cookies

This website may use cookies and similar technologies. Some cookies are necessary for the website to work. Other cookies, such as analytics, marketing, embedded content or review widgets, may require your consent.

Please see our Cookie Policy for more information.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.