🕒 Order 2+ hours in advance📍 Delivery within 3 miles🚶 Free Collection Available
S
Subway Virginia Quay
1 Newport Ave · Platters & Orders
← Back to Home

Privacy Policy

Last updated: 15 March 2026

1. Who We Are

The data controller for this website is Virginia Quay (Budgens) Ltd, trading as Subway Virginia Quay.

  • Company Registration: 07750508 (England & Wales)
  • Registered Address: 1 Newport Avenue, London E14 2ED
  • VAT Number: GB879858530
  • Contact Email: subwayvq@gmail.com
  • Phone: 020 7538 4619

We are registered with the Information Commissioner's Office (ICO). If you have any questions about how we handle your data, please contact us at the details above.

2. What Information We Collect

When you place an order or contact us, we may collect:

  • Contact Details: Full name, email address, and phone number.
  • Delivery Information: Physical address and postcode (for delivery orders only).
  • Order Details: Items ordered, quantities, prices, dietary notes, and preferred delivery time.
  • Payment: We do not store any payment card data. Payments are processed via PayPal invoice outside our systems.
  • Technical Data: IP address, browser type, and usage data collected through Google Analytics cookies (only if you consent).

3. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Contract performance (Article 6(1)(b)): Processing your name, contact details, address, and order data is necessary to fulfil your order and deliver agreed services.
  • Consent (Article 6(1)(a)): Google Analytics cookies are only set after you explicitly accept via our cookie banner. You may withdraw this consent at any time via the "Cookie Settings" link in the footer.
  • Legitimate interests (Article 6(1)(f)): We may use aggregated, anonymised data to improve our service, which does not override your privacy rights.

4. How We Use Your Information

We use your data solely to:

  • Process and fulfil your platter order.
  • Send you an order confirmation and PayPal invoice by email.
  • Communicate with you regarding your order status or queries.
  • Arrange delivery or notify you of collection readiness.
  • Improve our website performance (analytics, with your consent only).

We do not use your data for marketing or profiling, and we do not sell your data to any third party.

5. Data Sharing

We only share your personal data with:

  • EmailJS / Resend: Our email notification provider, used solely to send order confirmations. They act as a data processor under a Data Processing Agreement.
  • PayPal: To issue payment invoices. PayPal's own privacy policy applies to any payment data you enter on their platform.
  • Google Analytics: Anonymised usage data only, and only with your prior consent.
  • Internal Staff: To prepare and dispatch your order.

All third-party processors we use are GDPR-compliant and located within the UK or the European Economic Area (EEA), or are subject to appropriate safeguards.

6. Data Retention

We retain your personal data only for as long as necessary:

  • Order records: Retained for 7 years to comply with HMRC financial record-keeping requirements.
  • Contact enquiries: Retained for 12 months, then securely deleted.
  • Analytics data: Retained by Google Analytics for 14 months (anonymised).

7. Cookies

We use the following types of cookies:

  • Strictly necessary: Required for the site to function (e.g. basket, session). These do not require your consent.
  • Analytics (Google Analytics): Optional. Set only if you click "Accept All" in our cookie banner. These help us understand how visitors use the site.

You can review or change your cookie choices at any time by clicking "Cookie Settings" in the footer.

8. Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten") where there is no overriding legal reason to retain it.
  • Restrict processing of your data in certain circumstances.
  • Data portability — receive your data in a structured, machine-readable format.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time for analytics cookies, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at subwayvq@gmail.com. We will respond within 30 days.

9. Right to Complain

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

We would appreciate the opportunity to resolve any concern before you approach the ICO, so please contact us first.

10. Security

We take appropriate technical and organisational security measures to protect your data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data in transit.

11. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review it periodically.