Privacy Policy

Who We Are

Willows is a café and deli located in Bray. Our website is willows.cafe. When we say “we”, “us” or “our” in this policy, we mean Willows.

We take your privacy seriously and are committed to protecting your personal data in accordance with the UK & EU General Data Protection Regulation (GDPR).

What Data We Collect

When you place an order through our website, we collect:

• Your first and last name
• Your phone number (for order confirmation)
• Your order items, quantities and total
• Your chosen collection time
• Any special notes you provide with your order

We do not collect payment card details. No payment is taken through this website — orders are pay-on-collection.

Why We Collect It

We collect this information to:

• Process and fulfil your order
• Contact you if there is a problem with your order
• Maintain records for our business operations

Our legal basis for processing this data is the performance of a contract (your order) under Article 6(1)(b) GDPR.

How We Store Your Data

Order data is stored securely in a cloud database provided by Neon (Neon Inc.), hosted on Amazon Web Services in the EU West region. Neon is GDPR-compliant and the data is encrypted at rest and in transit.

We retain order records for up to 12 months, after which they are deleted.

Third-Party Services

Google Fonts. This website loads fonts from Google Fonts (fonts.googleapis.com). When your browser requests a font, Google’s servers receive your IP address. Google’s privacy policy is available at policies.google.com/privacy.

Vercel. Our website is hosted on Vercel Inc. Vercel may process your IP address and browser information as part of serving the website. Vercel’s privacy policy is available at vercel.com/legal/privacy-policy.

We do not use any advertising, tracking or analytics services on this website.

Cookies

This website does not set any cookies on your device. We use localStorage — a browser storage mechanism — solely to remember that you have dismissed our privacy notice and, if you are an administrator, to store your login session. This data never leaves your browser.

Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict our processing
• Lodge a complaint with your supervisory authority (in the UK, the Information Commissioner’s Office; in Ireland, the Data Protection Commission)

Contact Us

To exercise any of your rights, or if you have questions about this policy, please contact us via WhatsApp or in person at Willows, Bray.

Changes to This Policy

We may update this policy from time to time. The date at the top of this page will reflect when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.