Privacy notice
Who we are
This notice explains how Pip and Poppet collects, uses and protects personal information, in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).
We are the data controller: PIP AND POPPET LTD, trading as Pip and Poppet, company number 17477279, of Flat 2 Beeching House, 40 Hampton Road, Teddington, TW11 0JX. If you have any question about your information, or want to exercise any of the rights in this notice, contact us at [email protected] or 07519 657558.
Who this applies to: anyone who orders from us, contacts us, joins our mailing list, or visits our website.
Last updated: 10 October 2026. Check our website for the current version.
Information we collect
| Category | What it includes | When we collect it |
|---|---|---|
| Contact and order details | Name, delivery address, phone number, email address, order contents and delivery instructions | When you place an order, by website, message, phone or in person |
| Allergy and dietary information | Any allergy, intolerance or dietary need you tell us about, for you or your guests | When you place an order, or update it |
| Payment information | Card or payment details are collected and processed directly by our payment provider; we do not see or store full card numbers | At checkout |
| Communications | Emails, messages or notes from calls when you contact us | Whenever you contact us |
| Marketing preferences | Whether you've agreed to hear from us about news, offers, themes or reminders | Only if you opt in |
| Mailing list | Your email address, the date and time you joined, and the wording you agreed to when you signed up | When you join our mailing list on our website |
| Website usage | Technical information recorded when you visit, such as your IP address, device and browser type. We do not currently use analytics or advertising cookies | Automatically, while browsing our website |
We collect most of this directly from you. We do not buy personal information about you from anyone else.
How we use your information, and why we're allowed to
UK data protection law requires us to have a valid reason, called a lawful basis, for every use of your personal information.
| What we use it for | Information used | Lawful basis |
|---|---|---|
| Taking, confirming and preparing your order | Contact and order details, allergy information | Performance of a contract with you |
| Delivering your order | Delivery address, phone number | Performance of a contract with you |
| Preparing food safely for any allergy or dietary need | Allergy and dietary information | Explicit consent (see "Allergy and dietary information" below) |
| Invoicing, accounting and paying tax | Order and payment details | Legal obligation, and our legitimate interest in running the business properly |
| Responding to questions or complaints | Contact details, communications | Legitimate interest in providing good customer service |
| Sending you our mailing list emails: news and offers from Pip and Poppet, starting with when our website launches | Mailing list details, marketing preference | Consent, which you can withdraw at any time |
| Improving our website | Website usage data | Legitimate interest, or consent for non-essential cookies (see "Cookies") |
| Keeping records for food safety and insurance purposes | Order and allergy details | Legal obligation, and legitimate interest in food safety |
Where we rely on legitimate interest, we've considered that our use of your information is proportionate and doesn't override your own privacy rights. You can ask us for more detail on any of these at any time.
Allergy and dietary information
Information about allergies and health conditions is treated by law as a special, more sensitive category of information, so we handle it with extra care.
- Why we ask: we ask about allergies and dietary needs so we can prepare your order safely. We ask on every order, and we treat a blank answer the same as an unanswered question, never as "no allergies."
- Consent: by telling us about an allergy or dietary need when you order, you're giving us your explicit consent to use that information to prepare and label your food safely. You can withdraw this consent, but we may not be able to fulfil your order if we don't have the information we need to do so safely.
- Who sees it: only the people directly involved in preparing and delivering your order.
- How it's used: to decide how to prepare your order, to label it correctly, and to flag it clearly in our own systems and records, as set out in our Allergy Procedure for Orders.
- What we don't do with it: we don't use allergy or health information for marketing, and we don't share it with anyone beyond what's needed to prepare and deliver your order safely.
Our mailing list
What you get: news and offers from Pip and Poppet, starting with when our website launches.
Consent: we only add you if you ask to join. We keep a record of when you joined and the wording you agreed to, so we can show you chose to hear from us.
Leaving: you can leave at any time, using the unsubscribe link in any of our emails or by emailing [email protected]. Leaving the list does not affect any order you have placed.
Sharing: we never sell your email address or share it for anyone else's marketing.
Who we share your information with
We don't sell your personal information to anyone. We share it only where needed to run the business, with the following types of organisation:
| Who | Why | What they see |
|---|---|---|
| Our payment provider, Stripe | To take payment for your order | Payment details; they do not see your allergy information |
| Our website and hosting provider, Google (Firebase) | To run our website and store order and mailing list information | Order, contact and mailing list details as needed to operate the site |
| Our email and messaging providers | To send order confirmations and, if you've opted in, marketing | Contact details and, where relevant, marketing preference |
| HMRC, Companies House, or our council | Where required by law or for food business registration | Only what's legally required |
| A helper or driver, once we have one | To prepare or deliver your order | Only the order details, allergy information and address needed for that delivery |
Each of these organisations is only allowed to use your information for the purpose we've given it to them, and not for their own purposes.
If we ever needed to share information beyond this list (for example, to a new supplier or service), we would update this notice first.
How long we keep your information
We keep personal information only for as long as we need it for the reasons it was collected, or as long as the law requires.
| Information | How long we keep it |
|---|---|
| Order and delivery details | 2 years from the order, in case of a query or repeat order |
| Allergy and dietary information | Kept with the order record above, then deleted; not kept separately for longer |
| Financial and tax records (invoices, payment records) | 6 years from the end of the financial year they relate to, as required by HMRC |
| Food safety records referencing your order | Up to 2 years, in line with our food safety procedures |
| Mailing list details and marketing preferences | Until you unsubscribe or ask us to delete them. After you unsubscribe, we keep only your email address on a do-not-contact list, so we don't add you again by mistake |
| Website technical logs | Up to 30 days |
| Records of a complaint or incident | As long as reasonably needed to resolve it and meet insurance requirements |
After these periods, we delete or anonymise your information, unless we're required to keep it for longer by law.
Your rights
Under UK data protection law, you have the right to:
- Be informed about how we use your information, which is what this notice does
- Access the personal information we hold about you
- Correct it if it's inaccurate or incomplete
- Ask us to delete it, in certain circumstances
- Restrict how we use it, in certain circumstances
- Object to us using it, particularly for direct marketing, which we will always stop on request
- Receive a copy of certain information in a portable format, where technically feasible
- Withdraw consent at any time, where we rely on consent, such as for marketing or allergy information
How to exercise these rights: contact us at [email protected]. We'll respond within one month, and we won't normally charge a fee. We may ask you to confirm your identity first.
If you're not happy with our response, you have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO) Website: ico.org.uk · Helpline: 0303 123 1113
We'd appreciate the chance to resolve any concern directly first, but you're not required to contact us before contacting the ICO.
Children's information
Our orders are placed by adults, usually a parent or guardian, on behalf of children attending a party. We don't knowingly collect personal information directly from children, and information about the children at a party (such as an allergy or a first name for a party bag) is provided to us by the adult placing the order, as part of fulfilling that order.
Cookies
Our website does not currently use analytics or advertising cookies. It may store small amounts of information in your browser that are strictly necessary for the site to work, such as the contents of your basket. If we start using non-essential cookies, such as analytics, we will ask for your consent first through a cookie banner and update this notice.
Keeping your information secure
We take reasonable steps to protect your personal information, including using a reputable, secure website and payment provider, limiting who can access order and allergy information, and not storing full card details ourselves.
International transfers
Some of the services we use (for example, our website, email or payment provider) may store or process information outside the UK. Where this happens, we only use providers who put in place appropriate safeguards, such as the UK's International Data Transfer Agreement or equivalent protections, as required by law.
Changes to this notice
We may update this notice from time to time, for example as our business grows into new products or services. The current version is always available on our website, and we'll note the date it was last updated at the top.
Questions? Contact us at [email protected] or 07519 657558.