Privacy Policy

This Privacy Policy explains how Maharaja Sweets (“we”, “us”, “our”) collects, uses, shares and protects personal information when you visit our website maharajasweets.co.uk (the “Website”), place an order with us, create an account, make an event or catering enquiry, or otherwise interact with us. We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Maharaja Sweets is the data controller responsible for your personal information. Our details are:

Trading name: Maharaja Sweets
Address: 8 Grasmere Parade, Wexham Rd, Slough SL2 5HZ, United Kingdom
Email: info@maharajasweets.co.uk
Telephone (Restaurant): 01753 533566
Telephone (Office): +44 7909 527533

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

2. Information We Collect

We collect the following categories of personal information:

2.1 Information you give us

Identity data: name, title
Contact data: postal/delivery address, email address, telephone number
Account data: username, password (encrypted), order history, saved addresses
Order data: details of the products you order, special dietary or allergy notes, delivery instructions
Event and catering enquiry data: event date, event time, event type, number of guests, and any details you provide via our reservation/enquiry form
Payment data: we do not store full card details — payments are processed securely by our payment providers (see Section 6)
Communications: records of correspondence if you contact us by email, phone, or social media

2.2 Information we collect automatically

Technical data: IP address, browser type and version, device information, operating system
Usage data: pages visited, time spent on the Website, links clicked, referring website
Cookie data: as described in Section 7 (Cookies) below

3. How We Collect Your Information

We collect information when you:

Place an order for food or sweets through our Website
Create or log in to a “My Account” profile
Submit an enquiry through our event/reservation form
Contact us by phone, email, or social media
Browse or interact with our Website (via cookies and similar technologies)
Interact with our social media pages (Facebook, Instagram, TikTok, X)

4. How We Use Your Information

We use your personal data for the following purposes, and only where we have a valid legal basis to do so:

To process and fulfil your food or sweet orders, including delivery or collection (performance of a contract)
To manage your online account (performance of a contract)
To respond to and manage enquiries about weddings, birthdays, corporate events, religious events, and other catering bookings (performance of a contract / legitimate interests)
To process payments and prevent fraud (performance of a contract / legal obligation)
To send you order confirmations, delivery updates, and important service communications (performance of a contract)
To send you marketing communications about offers, new menu items, or events, where you have consented to receive these (consent) — you may opt out at any time
To improve our Website, menu, and services, and to understand how customers use our Website (legitimate interests)
To comply with legal, tax, and food-safety record-keeping obligations (legal obligation)
To protect our business, staff, and customers against fraud or misuse of our services (legitimate interests)

5. Online Ordering Through Third-Party Platforms

We also make our menu available through third-party ordering and delivery platforms, including Uber Eats, Deliveroo, and Just Eat. When you order through one of these platforms, your personal data (such as your name, address, and order details) is collected and processed by that platform in accordance with its own privacy policy, and shared with us so that we can prepare and fulfil your order. We recommend you review the privacy policy of any third-party platform you use to place an order.

6. Sharing Your Information

We do not sell your personal data. We may share your information with:

Payment processors, to securely process online card payments
Delivery partners and couriers, to fulfil delivery orders
IT, hosting, and website service providers, who help us operate our Website and systems
Professional advisers, such as accountants and legal advisers, where necessary
Regulatory authorities, food safety bodies, or law enforcement, where required by law
A buyer or successor, in the event we sell or restructure our business

Any third parties we share data with are required to keep your data secure and to use it only for the purposes we specify.

7. Cookies

Our Website may use cookies and similar tracking technologies to distinguish you from other users, remember your cart and preferences, and analyse how our Website is used. Cookies are small text files placed on your device. You can set your browser to refuse cookies, or to alert you when cookies are being sent; however, some parts of our Website (such as the shopping cart or account login) may not function properly if you do so. Where required by law, we will ask for your consent before placing non-essential cookies on your device.

8. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order and account records are typically retained for as long as your account is active, plus a reasonable period afterwards for tax and legal purposes. Event enquiry details are retained for a reasonable period to allow us to respond to your booking and for our records.

9. Data Security

We have put in place appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Payment card details are processed by our secure, PCI-compliant payment providers and are not stored on our own systems. While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Under UK data protection law, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request erasure of your personal data, where applicable
Request restriction of processing of your personal data
Object to processing of your personal data, including for direct marketing
Request transfer of your personal data (data portability)
Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at info@maharajasweets.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe we have not handled your personal data in accordance with the law.

11. International Transfers

Some of our third-party service providers (such as payment processors, delivery platforms, or IT providers) may store or process data outside the United Kingdom. Where this occurs, we take steps to ensure your data is protected to a standard consistent with UK data protection law, such as through the use of standard contractual clauses or equivalent safeguards.

12. Children’s Privacy

Our Website and services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: info@maharajasweets.co.uk
Phone: 01753 533566
Address: 8 Grasmere Parade, Wexham Rd, Slough SL2 5HZ, United Kingdom