Privacy Policy

1. Who We Are

Authentic Samosa is a food retailer based in the United Kingdom. We are committed to protecting your personal information and being transparent about how we use it. This policy explains what data we collect, why we collect it, and how we keep it safe.

If you have any questions about this policy, please contact us at info@authenticsamosa.com.

2. What Information We Collect

We only collect personal information when you voluntarily provide it to us. This includes:

• Contact form submissions — your name, email address, phone number (optional), and the message you send us.
• Phone and in-store enquiries — details you provide when you call or visit us directly.

We do not operate an online ordering system and do not collect payment card details or financial information through this website.

3. How We Use Your Information

We use the information you provide solely to:

• Respond to your enquiry or message.
• Contact you about a catering or events order if you have requested a quote.
• Provide customer support and answer questions about our products.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (UK GDPR)

Our legal basis for processing your personal data is legitimate interests — specifically, responding to your enquiries and providing customer service. Where you have provided explicit consent (for example, by submitting our contact form), that consent forms the legal basis.

5. How Long We Keep Your Data

We retain contact form messages for up to 12 months after the enquiry is resolved, after which they are securely deleted. You can request deletion at any time by contacting us.

6. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request that we delete your personal data ("right to be forgotten").
• Restriction — ask us to limit how we process your data in certain circumstances.
• Object — object to our processing of your data based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, please email us at info@authenticsamosa.com. We will respond within 30 days.

7. Cookies

This website uses only essential session cookies required to make the contact form work securely (CSRF protection). We do not use analytics, advertising, or tracking cookies. For full details, see our Cookie Policy.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All form submissions are protected with CSRF tokens and data is transmitted over HTTPS.

9. Third-Party Links

Our website may contain links to external websites (for example, Google Maps or WhatsApp). We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with a revised date at the top.

11. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.