Legal
Privacy Policy
Last updated: 1 April 2025
1. Who We Are
Ranga Lounge Ltd ("we", "us", "our") operates the website rangalounge.co.uk and associated food ordering services. We are registered in England and Wales. Our registered address is 25 DENMARK STREET, WOKINGHAM, BERKS RG40 2AY.
We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
We collect the following personal data when you use our services:
- Identity data: first name, last name
- Contact data: email address, phone number, delivery address
- Transaction data: order history, payment method type (not full card details — these are handled by Stripe)
- Technical data: IP address, browser type, pages visited, time spent
- Usage data: how you interact with our website and ordering system
- Marketing preferences: whether you have opted in to receive promotional emails
We do not collect or store full payment card details. All payment processing is handled securely by Stripe, Inc.
3. How We Use Your Data
We use your personal data to:
- Process and fulfil your food orders and table reservations
- Send order confirmations and delivery updates
- Respond to your enquiries and complaints
- Improve our website, menu, and services
- Send promotional offers if you have opted in (you can unsubscribe at any time)
- Comply with legal and regulatory obligations
4. Legal Basis for Processing
We process your data under the following legal bases:
- Contract: to fulfil your order or reservation
- Legitimate interests: to improve our services and prevent fraud
- Consent: for marketing communications
- Legal obligation: where required by law (e.g. tax records)
5. Data Sharing
We do not sell your personal data. We may share it with:
- Stripe, Inc. — payment processing
- Delivery partners — only the information needed to complete your delivery
- IT and hosting providers — who support our website and infrastructure
- Regulatory authorities — where legally required
All third parties are required to handle your data in accordance with UK GDPR.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Order data is kept for 7 years for legal and tax purposes. Marketing preferences are retained until you withdraw consent.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, email us at hello@rangalounge.co.uk. We will respond within 30 days.
8. Cookies
Our website uses essential cookies to function correctly (e.g. maintaining your cart session) and analytical cookies to understand how visitors use our site. You can manage cookie preferences in your browser settings.
9. Security
We take reasonable technical and organisational measures to protect your data, including SSL encryption, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.
10. Contact & Complaints
For any privacy concerns, contact our Data Controller at hello@rangalounge.co.uk.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.