Legal
Last updated: September 2026
Willows is a café and deli located in Bray. Our website is willows.cafe. When we say “we”, “us” or “our” in this policy, we mean Willows.
We take your privacy seriously and are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Most orders are placed with us on WhatsApp, by phone or in person. When you place an order, we collect:
We do not collect payment card details. No payment is taken through this website — orders are paid for at the counter.
If you choose to fill in our feedback form, we receive whatever you enter into it. The form is optional and you don't need to give your name.
We collect this information to:
Our legal basis for processing order data is the performance of a contract (your order) under Article 6(1)(b) UK GDPR. For feedback, our legal basis is our legitimate interest in improving what we offer (Article 6(1)(f)).
Order data is stored securely in a cloud database provided by Neon (Neon Inc.), hosted on Amazon Web Services in the EU West region. Neon is GDPR-compliant and the data is encrypted at rest and in transit.
We retain order records for up to 12 months, after which they are deleted.
Google Fonts. This website loads fonts from Google Fonts (fonts.googleapis.com). When your browser requests a font, Google’s servers receive your IP address. Google’s privacy policy is available at policies.google.com/privacy.
WhatsApp. If you message us on WhatsApp, your messages are handled by WhatsApp (Meta Platforms). WhatsApp's privacy policy is available at whatsapp.com/legal/privacy-policy.
Google Forms. Our feedback page embeds a Google Form. Responses you submit, and your IP address, are processed by Google.
Pexels. A few images on this website are loaded from Pexels (images.pexels.com), which receives your IP address when your browser loads them.
Vercel. Our website is hosted on Vercel Inc. Vercel may process your IP address and browser information as part of serving the website. Vercel’s privacy policy is available at vercel.com/legal/privacy-policy.
We do not use any advertising, tracking or analytics services on this website.
This website does not set any cookies on your device. We use localStorage — a browser storage mechanism — solely to remember that you have dismissed our privacy notice and, if you are an administrator, to store your login session and a short-lived copy of recent orders for the staff dashboard. This data never leaves your browser.
Under GDPR you have the right to:
To exercise any of your rights, or if you have questions about this policy, please contact us on WhatsApp or by phone on 07916 350766, or in person at Willows, Thames House, Bray, Maidenhead SL6 2AH.
We may update this policy from time to time. The date at the top of this page will reflect when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.