Privacy Policy

Privacy Policy

This Privacy Policy explains how Bubble Tea Catering UK (“we”, “us”, “our”, or “the Company”) collects, uses, and protects your personal information when you visit our website, submit an enquiry, or use our catering services.We are committed to protecting your privacy and ensuring your personal data is handled securely and transparently. This policy complies with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.By using our website or engaging our services, you acknowledge that you have read and understood this policy. If you do not agree with it, please refrain from using our website or submitting your information.Who We AreBubble Tea Catering UK is a professional event catering service that provides bubble tea catering for weddings, corporate functions, private parties, festivals, and public events across the United Kingdom.Business Name: Bubble Tea Catering Website: https://bubbleteacatering.ukEmail: info@pearllemongroup.com Address: 4th Floor, 1 Vine Street, London, W1J 0AH Phone: UK: +442071833436 UK: +447454539583We are the Data Controller for the information you share with us. This means we determine how and why your personal data is processed.Information We CollectWe collect data directly from you, automatically through our website, and occasionally through third-party platforms. The type of data we collect depends on your interaction with our business.Information You Provide DirectlyWhen you submit an enquiry, book our services, or contact us, we may collect:Information Collected AutomaticallyWhen you visit our website, we may automatically collect:This data helps us maintain website functionality, security, and performance analysis.Information from Third PartiesWe may receive personal information from:We only collect information necessary to fulfil our services and business obligations.How We Use Your InformationWe use your personal data responsibly and only for legitimate business purposes, including:We never use your information for unrelated or unlawful purposes.Legal Basis for ProcessingWe process personal data under lawful bases defined by UK GDPR, which include:You can withdraw consent for marketing communications at any time.Cookies and Tracking TechnologiesOur website uses cookies — small text files stored on your device — to improve functionality and analyse performance.Types of Cookies UsedYou can disable or manage cookies in your browser settings, though some site features may be affected if cookies are turned off.Data RetentionWe only keep your data for as long as necessary to fulfil the purpose it was collected for or as required by law.When no longer required, all personal data is securely deleted or anonymised.Sharing Your InformationWe never sell, rent, or trade your personal information. However, we may share it with trusted third-party service providers when necessary to fulfil our services.These may include:All partners are required to comply with UK data protection laws and maintain confidentiality.International Data TransfersMost of our data processing occurs within the United Kingdom. However, some of our service providers (e.g., web hosting or email systems) may store data in countries outside the UK or European Economic Area (EEA).When this happens, we ensure adequate protection through:This ensures your personal information remains protected to UK standards.Data SecurityWe implement strict technical and organisational measures to safeguard your personal information from unauthorised access, misuse, or loss.Security measures include:While no online system can be entirely risk-free, we continually review and improve our data security processes.Your Data Protection RightsAs a UK resident, you have several legal rights regarding your personal information.You may:To exercise any of these rights, please email us at [Insert Contact Email]. We will respond to valid requests within one month, in accordance with the law.Marketing and Communication PreferencesWe only send marketing emails or newsletters if you have opted in. You can unsubscribe at any time using the link included in our emails or by contacting us directly.We do not share your email or contact details with other businesses for marketing purposes without your explicit consent.External LinksOur website may contain links to other sites for your convenience. We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies before providing any personal information.Children’s PrivacyOur services are intended for adults aged 18 and over. We do not knowingly collect or process data from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately so we can delete it.Updates to This PolicyWe review and update this Privacy Policy periodically to reflect legal changes, new services, or data handling improvements. The most recent version will always be posted on this page, with the “Last Updated” date clearly displayed.Continued use of our website or services after updates means you accept the revised terms.How to Contact UsIf you have questions, requests, or concerns about this Privacy Policy or how your personal data is handled, please contact:Bubble Tea Catering Email: info@pearllemongroup.com Address: 4th Floor, 1 Vine Street, London, W1J 0AH Phone: UK: +442071833436 UK: +447454539583We take privacy seriously and aim to respond within five business days.

• Your name, phone number, and email address
• Company name and event details (venue, date, guest count, and preferences)
• Billing or invoice address and payment details (handled securely through third-party processors)
• Any feedback or correspondence you send us

• IP address, browser type, and device information
• Pages viewed and time spent on the website
• Traffic source or referring URL
• Cookie data and analytics information

• Event planners or venue partners assisting with your booking
• Advertising platforms such as Google Ads or Meta Ads
• Payment processors confirming completed transactions

• Providing our services – to process bookings, deliver catering, manage logistics, and handle payments
• Customer communication – to respond to enquiries, confirm details, and send updates before and after events
• Marketing and updates – to send information or offers (only when you have opted in)
• Support and improvements – to address feedback, improve our service, and train staff
• Legal and accounting obligations – to comply with business recordkeeping and tax requirements
• Website analytics – to understand visitor trends and improve online experience

• Contractual necessity: when information is needed to fulfil our service agreement with you
• Consent: when you have opted in to receive marketing or updates
• Legal obligation: when required by law or regulatory authorities
• Legitimate interest: when processing helps us improve our service, ensure security, or manage records responsibly

• Essential cookies: Required for website operation and security
• Analytics cookies: Help us measure visitor interactions (e.g., Google Analytics)
• Preference cookies: Remember language or settings
• Marketing cookies: Used to display relevant ads and measure campaign performance

• Client booking and payment records are retained for up to 7 years for tax and accounting purposes.
• Enquiry and communication data may be kept for up to 24 months for follow-up or analytics.
• Marketing data is retained until you unsubscribe or request deletion.

• Payment gateways and processors for secure transactions
• Event partners or suppliers assisting with setup and delivery
• IT and cloud hosting providers ensuring data storage security
• Marketing platforms used for email communications
• Legal, tax, or accounting professionals for compliance purposes

• Transfers to countries recognised as providing adequate data protection, or
• Standard Contractual Clauses approved by the Information Commissioner’s Office (ICO).

• SSL encryption on all data transmissions
• Restricted access to data for authorised personnel only
• Secure cloud and physical data storage
• Regular security audits and software updates
• Staff training on data handling practices

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data where it’s no longer required
• Object to certain processing activities
• Request data portability to another provider
• Withdraw consent for marketing communications