HomeAbout Us

Our Services

🍽️ Business Solutions🖥️ Systems📱 Website Builder💳 Payment Solutions📣 Digital Marketing

Our Products

🍔 Monk Food ↗
Sign In
Home › Privacy Policy

Privacy Policy

How we collect, use, and protect your personal data — in line with UK GDPR.

1. Who We Are (Data Controller)

J.P. Nadar ("we", "our", or "us") is the Data Controller responsible for your personal data. We provide complete digital solutions for restaurants and takeaways across the United Kingdom.

  • Company: J.P. Nadar
  • Email: info@jpnadar.co.uk
  • Phone: +44 (0)330 043 5064
  • Address: Office 9500ee, 3 Fitzroy Place, Area 1/1 Fitzroy Place, Sauchiehall Street, Glasgow, Scotland, G3 7RH

This policy applies to all personal data collected through our website at jpnadar.co.uk and our enquiry forms. It complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We only collect data you actively provide to us. Depending on which form you complete, this may include:

  • Identity Data: Full name.
  • Contact Data: Email address and telephone number.
  • Business Data: Restaurant or business name, postcode, monthly card turnover, and monthly transaction volume (card machine quote form only).
  • Message Data:Any additional information you voluntarily include in the message or "problem with current provider" fields.
  • Technical Data: IP address, browser type, and basic device information — collected automatically by Google reCAPTCHA and our web host for security and spam prevention.
  • Cookie Data: Your cookie consent preference, stored locally in your browser.

We do not collect sensitive personal data (e.g. racial or ethnic origin, health data, biometric data) and we never collect payment card details directly — all card processing is handled by third-party PCI DSS-compliant providers.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

  • Consent (Article 6(1)(a)): When you tick the consent checkbox on our contact or quote forms, you give us explicit consent to store and use your data to respond to your enquiry. You can withdraw this consent at any time by contacting us.
  • Legitimate Interests (Article 6(1)(f)): We process certain technical data (e.g. IP addresses) for website security, fraud prevention, and spam protection — where these interests do not override your rights.
  • Legal Obligation (Article 6(1)(c)): Where we are required by law to retain certain records.

4. How We Use Your Data

We use your personal data only for the specific purpose it was collected for. We will never use it for unrelated purposes without obtaining your consent again.

  • To respond to your direct enquiry or quote request within 24 hours.
  • To provide you with information about the J.P. Nadar services you expressed interest in.
  • To follow up on open enquiries (one follow-up only, unless you engage further).
  • To protect our website from spam and abuse using Google reCAPTCHA (see Section 6).

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. How We Store Your Data & Retention Periods

When you submit a form, your data is securely transmitted via HTTPS and stored in Google Workspace (Google Sheets), operated by Google LLC under their data processing agreement, which meets international security standards including ISO 27001.

We retain your personal data for the following periods:

  • Enquiry data (contact form submissions): 12 months from the date of submission, or until you request deletion — whichever is sooner.
  • Quote request data (card machine form): 24 months, to allow for comparison quotes and follow-up if you become a client.
  • Technical / reCAPTCHA logs:Governed by Google's own retention policy (typically 30–90 days for security logs).

After the retention period, data is permanently deleted from our systems. You can request earlier deletion at any time — see Section 8.

6. Third-Party Services & Data Sharing

We do not sell, rent, or trade your personal data. We share it only with the following trusted service providers, strictly to operate our website:

  • Google LLC — reCAPTCHA (Invisible v2): Protects our forms from spam bots. Google analyses browser behaviour and may set cookies. Subject to Google Privacy Policy and Terms of Service.
  • Google LLC — Google Workspace (Sheets):Stores form submissions securely. Data is processed under Google's Data Processing Agreement.
  • Google LLC — Google Fonts:Loads typefaces (Playfair Display, DM Sans) from Google's CDN. This may log your IP address. No personal data from our forms is shared.
  • Vercel Inc. — Hosting:Our website is hosted on Vercel's infrastructure. Vercel processes request logs which may include your IP address.

All third-party processors are bound by Data Processing Agreements and are required to keep your data secure and use it only as instructed.

We may disclose your data to law enforcement or regulatory bodies if required to do so by law.

7. Cookies & Tracking

We use a minimal number of cookies. Here is a full breakdown:

  • jpnadar_cookie_consent (Essential): Stores your cookie consent preference (accepted/declined). Expires after 12 months. No tracking.
  • Google reCAPTCHA cookies:Set by Google when our forms load, used to detect bot behaviour. These are third-party cookies governed by Google's policy. Typical names: _GRECAPTCHA, rc::a, rc::b,rc::c.

We do not use analytics cookies (e.g. Google Analytics), advertising cookies, or social media tracking pixels on this website.

You can manage or delete cookies at any time through your browser settings. Declining cookies will not affect your ability to read our content, but may affect form submission protection.

8. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights in relation to your personal data. To exercise any of them, contact us using the details in Section 9. We will respond within 30 days.

  • Right to be Informed (Article 13 & 14): You have the right to know what data we hold about you and how we use it. This Privacy Policy fulfils that right.
  • Right of Access (Article 15):You can request a copy of all personal data we hold about you (a "Subject Access Request").
  • Right to Rectification (Article 16): You can ask us to correct any inaccurate or incomplete personal data we hold.
  • Right to Erasure / 'Right to Be Forgotten' (Article 17): You can request that we delete your personal data. We will comply unless we have a legal obligation to retain it.
  • Right to Restrict Processing (Article 18): You can ask us to pause processing your data while a dispute is being resolved.
  • Right to Data Portability (Article 20): You can request your data in a structured, machine-readable format (e.g. CSV) where technically feasible.
  • Right to Object (Article 21): You can object to processing based on legitimate interests at any time.
  • Right to Withdraw Consent (Article 7(3)): Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
  • Rights Related to Automated Decision-Making (Article 22): We do not use automated decision-making or profiling, so this right is not currently applicable.

9. Right to Lodge a Complaint with the ICO

If you are unhappy with how we handle your personal data, you have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Post:Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would always appreciate the opportunity to address your concern directly before you contact the ICO, so please reach out to us first using the details below.

10. Contact Us

For any questions about this Privacy Policy, to exercise your rights, or to make a complaint, please contact us:

  • Email: info@jpnadar.co.uk
  • Phone: +44 (0)330 043 5064
  • Post: Office 9500ee, 3 Fitzroy Place, Area 1/1 Fitzroy Place, Sauchiehall Street, Glasgow, Scotland, G3 7RH

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our data practices, or the services we offer. The "Last Updated" date at the bottom of this page will always reflect the most recent version. Significant changes will be notified by a notice on our homepage.

Last Updated: May 2026