Privacy Policy

1. Who We Are

The Bok Shop ("we", "us", "our") operates the website thebokshop.codedvisiondesign.co.uk and associated mobile application. We are a fried chicken and vegan Chick'n restaurant with locations in Brighton and Horsham, UK.

2. Information We Collect

We collect the following types of personal data:

• Account Information: Name, email address, phone number when you create an account or place an order.
• Order Information: Delivery address, order history, payment status (we do not store card details — payments are processed securely by Stripe).
• Reservation Information: Date, time, party size, and special requirements for table bookings.
• Social Login Data: When you sign in with Google or Facebook, we receive your name, email, and profile identifier. We do not access your contacts, posts, or any other social media data.
• Usage Data: IP address, browser type, pages visited, and device information collected via standard server logs.
• Location Data: Approximate location (IP-based) to suggest your nearest store. We do not track GPS location.

3. How We Use Your Information

• To process and fulfil your orders and reservations
• To create and manage your customer account
• To send order confirmations and delivery updates
• To improve our menu, services, and website experience
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Third-Party Services

We use the following trusted third-party services:

• Stripe — Secure payment processing. See Stripe's Privacy Policy.
• Google — OAuth login, Maps, Places API. See Google's Privacy Policy.
• Facebook / Meta — OAuth login. See Meta's Privacy Policy.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Order history is retained for accounting and legal purposes for up to 7 years. You may request deletion of your account at any time.

6. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your data ("right to be forgotten")
• Withdraw consent for data processing
• Request data portability
• Object to processing of your data

7. Data Deletion

You can request deletion of your account and associated data at any time by visiting our Data Deletion page, or by emailing us at info@thebokshop.uk.

8. Cookies

We use essential session cookies to keep you logged in and manage your shopping cart. We do not use third-party tracking or advertising cookies.

9. Security

We protect your data using industry-standard measures including HTTPS encryption, secure password hashing (Argon2id), CSRF protection, and rate limiting. Payment data is handled exclusively by Stripe and never touches our servers.

10. Contact Us

For privacy-related enquiries, contact us at:

info@thebokshop.uk