Updated 25 October 2026. Draft policies for the Hutton Spice test website, under business review.
Who is responsible
Hutton Spice is the restaurant business responsible for customer information collected through this website. Our restaurant address is 38 Springfield Avenue, Hutton, Brentwood CM13 1RE. For a privacy enquiry, call 01277 226 124 or write to us at that address.
This draft covers the Hutton Spice website and ordering service. Separate services, including Google, Facebook and food-delivery platforms, have their own privacy notices when you choose to visit them. The optional Google Map on Find Us stays off until you allow Google Maps in the privacy controls. When enabled, Google receives technical information such as your IP address and browser details and may use cookies or browser storage. We remember your choice for up to 180 days; a valid saved permission lets the map load automatically on later visits. You can withdraw permission through Cookie settings in the footer. This removes the map and stops future loads, but cannot undo information already sent or delete Google’s cookies; those can be managed through your browser. See Google’s privacy policy.
Information we collect
- Orders: your name, email address, phone number, order items, selected options, charges, payment method, order status and any notes you choose to provide. Delivery orders also need an address.
- Optional accounts: your contact details and a securely hashed password. An account is not compulsory to order.
- Contact: details you share when asking about an order, a complaint or a privacy request.
- Technical information: session and security identifiers, IP address, browser/request information and server logs needed to operate and protect the service.
- Cookie choices: your selected preference and its expiry. The allergy Yes/No prompt in this preview is kept only in page memory and is not added to your order record.
Please do not enter payment card details or sensitive medical information in order notes. If you have an allergy or intolerance, do not order online; call the restaurant instead.
Why we use it
| Purpose | Basis |
|---|---|
| Receive, prepare and fulfil an order; communicate about delivery, collection or a problem | Taking steps at your request and performing our contract with you |
| Provide an account you choose to create | Performing the account service you request |
| Keep transaction records required by law | Legal obligations |
| Protect the service, prevent abuse and handle disputes | Legitimate interests in a secure, reliable business, balanced against your rights |
| Display optional Google Maps after you allow it | Your consent, which you can withdraw through Cookie settings |
| Optional direct marketing or optional tracking, if introduced separately | A separate valid choice where required; neither is activated by accepting ordering terms |
There are no optional analytics or advertising trackers configured in the current local preview. Creating an account does not sign you up to marketing.
Retention and security
How long we need to keep personal information depends on the type of record and why it is needed:
- Order and payment records: to fulfil and support your order, deal with refunds or disputes, and meet applicable accounting, tax or other legal obligations.
- Account and saved contact details: to provide and support the account services you use, including details you choose to save for future orders.
- Enquiries and complaints: to deal with the matter and any related follow-up or dispute.
- Security records: to investigate misuse, prevent fraud and protect the service.
These purposes determine how long information is needed; there is no single retention period for every record. Information should not be kept after the relevant purposes and legal requirements no longer apply.
You can ask about retention or request deletion by calling 01277 226 124 or writing to Hutton Spice, 38 Springfield Avenue, Hutton, Brentwood CM13 1RE. We may need to keep particular records while they remain necessary for a legal obligation or to deal with an unresolved complaint, refund or dispute. Closing an account does not necessarily remove those records.
Account passwords are hashed. Access to order and customer information should be restricted to authorised staff and service providers. No online service can guarantee absolute security. Please keep your password private and contact us if you suspect account misuse.
Your rights and choices
Depending on the circumstances, you may ask to access or correct your personal information, have it erased, restrict its use, receive a portable copy or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Some records may still need to be retained for legal reasons.
Contact the restaurant using the details above. We may need reasonable information to verify your identity before disclosing personal data. You can change cookie preferences through the Cookie settings link in the footer.
If you are unhappy with our handling of your information, please contact us. You can also complain to the Information Commissioner’s Office.
Changes to this notice
Material changes to data use or optional tracking should be explained before they take effect. The date at the top identifies this draft version. Read the Cookie policy for storage and preference information.