PRIVACY AND YOUR PERSONAL DATA (SEPTEMBER 2026)
‘Us’, ‘we’ or ‘our’ means Fishnchickn Ltd and its related parties and trading names, including ‘Fishnchickn’, ‘Churchill’s Fish & Chips’, ‘Bankers Fish & Chips’, ‘Toff’s of Muswell Hill’, ‘The Boundary Fish & Chips’ and ‘My Chippy UK’. This policy explains how and why we use Personal Data.
Providing personal data to us does not, by itself, mean that you consent to every use described in this policy. Where we rely on consent, we will specifically ask for it and explain what the consent we are asking for covers.
We are committed to protecting the privacy of our users and customers. This privacy policy is intended to inform you how we might collect, store, use and/or share (process) your Personal Data when you use our services.
It applies to Personal Data collected by us, or provided by you, whether in one of our restaurants, over our website (including the mobile optimised version of the websites accessible from your portable hand-held device), our My Chippy UK App or My Chippy online ordering website or in any other way (such as over the telephone). It is also intended to assist you in making informed decisions when using our websites and our products and services. Please take a minute to read and understand the policy.
We process personal data in accordance with the UK General Data Protection Regulation (‘UK GDPR’), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (‘PECR’) and other applicable data protection and privacy laws. If you have a question about the information we hold, write to Data Protection, Fishnchickn Ltd, Unit 5 Kierbeck Business Park, Wharf Lane, Vange, Basildon, Essex, SS16 4SW or email customerservice@tcg-ltd.co.uk.
Fishnchickn, Toff’s of Muswell Hill, The Boundary Fish & Chips, Churchill’s Fish and Chips and Bankers Fish & Chips are trading names of Fishnchickn Ltd. Fishnchickn Ltd is the data controller of your information for the purposes of the Act and is a company registered in England and Wales with company registration number 01018600.
Our registered office is Unit 5 Kierbeck Business Park, Wharf Lane, Vange, Basildon, Essex, SS16 4SW.
WHAT INFORMATION DO WE COLLECT ON OUR WEBSITE, MY CHIPPY APP/ONLINE ORDERING WEBSITES?
“Personal Data” means any information about an individual from which that person can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
HOW IS YOUR PERSONAL DATA COLLECTED?
We use different methods to collect data from and about you including through:
1. Your interactions with us
2. Automated technologies or interactions
3. Contact, Financial and Transaction Data is collected from business partners and providers of technical, payment and delivery services.
WHAT LAWFUL BASES DO WE RELY ON?
The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
Depending on the purpose, we rely on:
a) performance of a contract to operate your account, process and fulfil orders and provide requested services;
b) compliance with legal obligations, including tax, accounting, food-safety and regulatory requirements; consent for email or text marketing and non-essential cookies or similar technologies; and
c) our legitimate interests in responding to customers, securing and improving our services, preventing fraud and promoting our business, including through the Meta audience activity explained below, provided those interests are not overridden by your rights and interests.
You must provide the information reasonably needed to create an account or place, fulfil or deliver an order. If you do not provide it, we may be unable to provide the relevant service.
We rely on legitimate interests for certain marketing and advertising activities, including creating customer-list audiences and lookalike audiences through Meta. Before carrying out such processing, we assess and balance our business interests against the rights and freedoms of affected individuals.
HOW DO WE USE THE INFORMATION THAT YOU PROVIDE TO US?
We will only use your Personal Data when the law allows us to. We may collect and process personal data about you for the following purposes:
DISCLOSURES OF YOUR PERSONAL DATA
We may share your personal data where necessary with the parties set out below for the purposes set out above:
If you would like a current list of any specific third parties that we share your personal data with, please contact us.
COOKIES
Like many websites and apps, our websites and app use cookies and similar technologies. These are small files or identifiers that help services operate, remember choices, understand use and, where you have consented, measure or personalise advertising.
Information collected through cookies and similar technologies may include visit dates and times, pages viewed, interactions, device and browser information, IP addresses and online identifiers. This information may be Personal Data. We ask for consent before using non-essential analytics or advertising cookies, pixels or similar technologies.
We use ‘session’ cookies which enable you to carry information across pages of the Website and avoid having to re-enter information. Session cookies enable us to compile statistics that help us to understand how the Website is being used and to improve its structure.
We also use ‘persistent’ cookies which remain in the cookies file of your browser for longer and help us to recognise you as a unique visitor to the Website, tailoring the content of certain areas of the Website to offer you content that match your preferred interests.
You can accept or reject non-essential cookies and change or withdraw your choices through our cookie settings. You can also block cookies through your browser, although some parts of the website or app may then not work properly.
MY CHIPPY LOYALTY PROGRAMME
When you scan your My Chippy loyalty card or app when making a purchase, we link that transaction to your My Chippy account. This may include the store, date and time, items purchased, ordering channel, amount spent and the points, stamps or rewards earned or redeemed.
We use this information to operate the loyalty programme, calculate and maintain your points, stamps and rewards, display or investigate your account activity, respond to queries, prevent misuse and understand and improve the programme and our services. We rely on performance of our contract with you to administer the loyalty programme and on our legitimate interests for preventing misuse and analysing and improving our services.
We may also use your loyalty transaction history to group customers by factors such as recency, frequency, spend, usual store or ordering channel so that we can plan and target our marketing. If a customer group is used as a source audience on Meta, we provide Meta only with the limited matching contact details described in the Meta section below, not your individual order contents or spend. You can object at any time to your Personal Data being used for direct-marketing profiling by contacting customerservice@tcg-ltd.co.uk.
MY CHIPPY CLICK & COLLECT & ORDER AT TABLE
Our Click and Collect and Order at Table service (App and Desktop site) are powered by Redcat Hospitality. Redcat will store names, mobile numbers, email addresses. To find out information about Redcat’s Privacy Policy go to: https://www.redcatht.com/en-au/about-us/privacy-policy
MY CHIPPY DELIVERY & UBER DIRECT
Where you place a delivery order through My Chippy for any of our brands, including Fishnchickn, Churchill’s Fish & Chips, Bankers Fish & Chips, Toff’s of Muswell Hill or The Boundary Fish & Chips, your order may be fulfilled by Uber Direct, Uber’s delivery fulfilment service.
To enable Uber Direct to collect and deliver your order successfully, we may share the Personal Data needed to manage and complete the delivery. This may include your name, delivery address, telephone number, order details, delivery instructions and information needed to identify, collect and complete your delivery.
This information is shared with Uber Direct where necessary to fulfil your delivery order, including arranging collection, delivery updates, contact about delivery issues and completion of the delivery. We rely on performance of our contract with you as the lawful basis for this processing. Depending on the processing activity undertaken (but this will only apply in limited circumstances), Uber may process Personal Data as an independent controller in accordance with its own privacy notice.
The Personal Data visible to the delivery driver is restricted. Drivers do not see all the Personal Data shared with Uber Direct. For example, drivers will usually only see a limited version of your name, such as your first name and the first initial of your surname. Drivers will see your delivery address so they can complete the delivery, but this is removed from the driver’s app after the order is completed. Drivers do not see your actual telephone number. Where contact is needed, this is handled through Uber’s app using a masked or proxy number. Drivers may also see your order details, delivery instructions and any other information reasonably needed to identify, collect and complete your delivery.
Uber, its delivery partners and/or drivers may use this Personal Data only where needed in connection with the successful fulfilment of your delivery order, for example to confirm your address, provide delivery updates, contact you about a delivery issue or complete the order.
Uber will process your Personal Data in accordance with its own privacy notice. You can read Uber’s Privacy Notice for Riders and Order Recipients here: https://www.uber.com/global/en/privacy-notice-riders-order-recipients/
Where Personal Data is transferred outside the United Kingdom, we and our service providers will ensure that appropriate safeguards are implemented in accordance with UK data protection laws.
Your Personal Data will not be shared with Uber Direct by Fishnchickn Ltd for general marketing purposes.
EMAIL MARKETING
We have an account with Impact Data, which is an email-marketing provider. Impact Data will store IP Addresses, information about links you click on within the emails, email addresses, names and local store selections that are captured when you become a Registered User. We need to provide Impact Data with such information as is necessary for it to provide its services to us, but not for any other purpose. If you contact Impact Data directly regarding your subscription to our email marketing, Impact Data may contact you directly; otherwise, Impact Data will never contact you. You are always free to unsubscribe from our email-marketing list at any time. To find out further information about Impact Data’s Data Protection and Terms of Use go to: https://www.impactdata.com.au/privacy-policy.html
We collect customer contact details and purchase data for the purposes of serving an online transaction. When customers opt in, this data is used to send marketing communications or business updates. Fishnchickn Ltd is the data controller (defined by ICO). Fishnchickn Ltd use services provided by Impact Data to manage this data on behalf of Fishnchickn Ltd. Impact Data are the data processor and will only use the data for the purposes we agree to.
Impact Data provides marketing software that allows Fishnchickn Ltd to store, manage and communicate with customers. Impact Data does not own or sell our customer data. If Personal Data is processed outside the UK, we use the lawful transfer arrangements described below. To find out more about Impact Data go to: https://www.impactdata.com.au
Where you consent through our cookie settings, we use Google Analytics to help us understand how users interact with our websites. Information may include approximate location, referral source, device and browser, visit duration and pages viewed. You can withdraw consent through our cookie settings. For information about Google’s processing, go to: https://policies.google.com/privacy
SOCIAL MEDIA
When you visit or interact with our social media pages, the relevant platform may collect information about your device, account and interactions. We may receive page and campaign insights and use them to improve our content and advertising. Meta processes information under its own privacy policy at https://www.facebook.com/privacy/policy/.
META PIXEL
If you consent through our cookie settings, we may use the Meta Pixel on our websites to measure visits and advertising, retarget website visitors and create website-based audiences. You can change or withdraw this consent through our cookie settings.
META CUSTOMER-LIST AND LOOKALIKE AUDIENCES
We may use limited contact Personal Data associated with your My Chippy account, such as your email address or mobile number to create a customer-list audience on Meta platforms, including Facebook and Instagram, and to create a lookalike audience of other Meta users. The contact details are hashed before or during upload and used for matching. We do not send Meta your payment-card details, order contents, allergy or dietary information, complaints or delivery instructions for this purpose. We rely on our legitimate interests in promoting our business and making our advertising more relevant and efficient. Before undertaking this processing, we conduct an assessment of those interests and consider the impact on the individuals concerned.
For customer-list matching, Meta processes the supplied list data as our processor under its Customer List Custom Audiences Terms. For related targeting and ad delivery, we and Meta may act as joint controllers: we select the source list and campaign purpose, while Meta operates its matching and advertising systems under its own terms and privacy information.
This processing is carried out only in relation to individuals aged 18 or over who have signed up to receive marketing communications from us and who have not objected to such use of their Personal Data.
Your choice. You can object at any time to us using your details for Meta customer-list or lookalike audiences. Fill out the form found here with your My Chippy account details or use the link in your account area under Advertising Preferences. If you object, we will cease using your Personal Data for these purposes (we may still need to retain your data for other purposes and/or as necessary to record your preference).
Alternatively, copy and paste this link into your browser to access the form:
advertisingpreferences.mychippy.uk
SOCIAL MEDIA CUSTOMER SERVICE
If you reach out to us on social media, we will respond using the same channel that you contacted us on unless the enquiry is complex and requires us to disclose your personal data for further follow up. In such instances, we will ask for your contact details to continue the discussion or use the contact details you provided when you placed your order. If you tag our page in your Instagram post, we may ask for your permission to allow us to share your image on our Instagram page. If you decline the request, we will not post your image.
We may disclose your Personal Data to third parties.
GOOGLE MAPS
We may use the Google Maps Application to gather information about your location, which will improve your experience when browsing our website. To learn about Google Maps Privacy Policy click here: https://policies.google.com/privacy
WIFI
Our Wi-fi is provided by Meraki, a subsidiary of Cisco. Please find further information regarding their Data Protection Terms and Conditions here: https://meraki.cisco.com/trust#privacy
YOUR LEGAL RIGHTS
You have a number of rights under data protection laws in relation to your personal data.
You have the right to:
If you wish to exercise any of the rights set out above, please contact Data Protection, Fishnchickn Ltd, Unit 5 Kierbeck Business Park, Wharf Lane, Vange, Basildon, Essex, SS16 4SW or email customerservice@tcg-ltd.co.uk.
No fee usually required.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you:
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond:
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
COMPLAINTS
You have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues. However, before doing so please make sure you have first made your complaint to us or asked us for clarification if there is something you do not understand. The ICO will expect you to have done this before reviewing your complaint. You can make a complaint regarding data protection matters to us by any means of contact; however we’d recommend emailing us at customerservice@tcg-ltd.co.uk. When we receive a data protection complaint, we will:
The Information Commissioner’s Office can be contacted at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, by telephone on 0303 123 1113, or through the ICO website (www.ico.org.uk).
YOUR CONSENT
Using our website or app does not amount to consent to every use of Personal Data described in this policy. Where consent is required, we will ask for it separately and you may withdraw it at any time. We will update this policy if our use of Personal Data changes materially.
WHERE WE STORE YOUR PERSONAL DATA
We hold Personal Data securely and allow access only where needed by our staff or suppliers to provide services, support our operations or carry out the activities described in this policy. We keep it only for as long as reasonably necessary for those purposes, legal obligations and the handling of disputes.
We do not retain details of credit card or debit card information used by our customers when placing orders for our products.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site or our app, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
INTERNATIONAL TRANSFERS
Some suppliers and platforms may process Personal Data outside the United Kingdom. Where Personal Data is transferred to a country that is not subject to an adequacy regulation, we will ensure that appropriate safeguards are in place, including the International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses or another lawful transfer mechanism recognised under UK data protection laws. You may contact us for more information about the safeguard relevant to your information.
SECURITY
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
DATA RETENTION
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
By law we must keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.
In some circumstances you can ask us to delete your data: see the section on your rights above for further information.
CHANGES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES
We keep our privacy policy under regular review. This version was last updated on [21st September 2026].
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.
THIRD PARTY SITES
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.