Now Booking Summer 2026 — Weekend Dates Filling Fast Get a quote
Skip to main content

Privacy Policy

Last updated March 19, 2026

This Privacy Notice for Salt Wind Catering (a trading name of HM Catering Cornwall Ltd, registered in England & Wales, Company No. 16589529) ('we', 'us', or 'our'), describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:

  • Visit our website at https://www.saltwind.catering, or any website of ours that links to this Privacy Notice
  • Engage with us in other related ways, including any sales, marketing, or events

Data Controller: HM Catering Cornwall Ltd, trading as Salt Wind Catering, 37 Fore Street, Redruth, Cornwall TR15 2AE. Company No. 16589529. VAT No. GB506667575. We are registered with the Information Commissioner's Office (ICO) as a data controller (Registration No. C1897982). For data protection enquiries, contact us at info@saltwind.catering.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@saltwind.catering.

Summary of Key Points

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.

How do we keep your information safe? We have adequate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us at info@saltwind.catering. We will consider and act upon any request in accordance with applicable data protection laws.

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include the following:

  • Names
  • Phone numbers
  • Email addresses
  • Mailing addresses
  • Contact preferences
  • Billing addresses

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases through our website checkout, payment links, or invoices. This may include your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by Square. We do not store your full card details on our servers. You may find their privacy notice at squareup.com/gb/en/legal/general/privacy.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.

Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:

  • Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services.
  • Device Data. Information about your computer, phone, tablet, or other device you use to access the Services.
  • Location Data. Information about your device's location, which can be either precise or imprecise. You can opt out by disabling your Location setting on your device.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To facilitate account creation and authentication and otherwise manage user accounts.
  • To deliver and facilitate delivery of services to the user.
  • To respond to user inquiries/offer support to users.
  • To fulfil and manage your orders, payments, returns, and exchanges made through the Services.
  • To save or protect an individual's vital interest.

3. What Legal Bases Do We Rely On to Process Your Information?

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. We may rely on the following legal bases:

  • Consent. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
  • Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you.
  • Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
  • Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.
  • Legitimate Interest. We may process your data where we have a legitimate business interest (Article 6(1)(f) UK GDPR), such as sending you relevant menu updates you have requested, or maintaining our CRM for order management. You have the right to object to this processing at any time by contacting us at info@saltwind.catering.

4. When and With Whom Do We Share Your Personal Information?

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. A full list of our data processors, including confirmation that a Data Processing Agreement is in place with each, is available on our Data Processors page.

The specific third-party services we use include:

We also may need to share your personal information in the following situations:

  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

4a. International Data Transfers

Some of the third-party processors we use are based outside the United Kingdom. When we transfer your personal data outside the UK, we ensure that appropriate safeguards are in place as required by UK GDPR Article 46:

  • Square — Headquartered in the United States. Square is certified under the UK–US Data Bridge, providing an adequacy-equivalent transfer mechanism.
  • Google Workspace (Gmail) — Headquartered in the United States. Google is certified under the UK–US Data Bridge, providing an adequacy-equivalent transfer mechanism.
  • Google (Analytics / Tag Manager) — Operates globally including the United States. Google is certified under the UK–US Data Bridge. Analytics data is only transferred after you have consented to analytics cookies.
  • Meta (Facebook Pixel) — Headquartered in the United States. Meta is certified under the UK–US Data Bridge. Marketing data is only transferred after you have consented to marketing cookies.
  • Wix — Headquartered in Israel. Israel holds an adequacy decision from the UK ICO. Wix also operates servers in the EU/EEA.
  • Cloudflare — Operates a global network. Data transferred under Standard Contractual Clauses. Our website is hosted on Cloudflare's infrastructure.
  • Microsoft (Clarity and GitHub) — Headquartered in the United States. Data transferred under Standard Contractual Clauses approved by the UK ICO. Clarity data is only transferred after you have consented to analytics cookies.

You can request a copy of the safeguards in place for any international transfer by contacting us at info@saltwind.catering.

5. Do We Use Cookies and Other Tracking Technologies?

We may use cookies and similar tracking technologies to gather information when you interact with our Services. These technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences (such as cookie consent), and assist with basic site functions.

We use Google Analytics (loaded via Google Tag Manager) and Facebook Pixel for analytics and marketing purposes. These scripts only load after you have given explicit consent via our cookie banner. Google Analytics loads when you consent to analytics cookies; Facebook Pixel loads when you consent to marketing cookies. You can manage your preferences at any time using the cookie settings link in our footer.

Cookies we use

The following table lists the cookies set by our website and the third-party services we use:

Cookie Provider Purpose Type Duration
saltwind-cookie-consent Salt Wind Catering Stores your cookie consent preferences Essential 1 year
sw_preview Salt Wind Catering Staging site access token Essential 24 hours
_ga Google Analytics Distinguishes unique users for analytics. Set only after analytics consent. Analytics 2 years
_ga_* Google Analytics Maintains session state for GA4. Set only after analytics consent. Analytics 2 years
_gid Google Analytics Distinguishes users for analytics. Set only after analytics consent. Analytics 24 hours
_fbp Meta (Facebook) Identifies browsers for Facebook advertising. Set only after marketing consent. Marketing 3 months

How to manage cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. You can also manage your cookie preferences through the cookie consent banner that appears when you first visit our website, or at any time via the “Cookie Settings” link in our footer.

6. How Long Do We Keep Your Information?

We retain your personal information only for as long as necessary for the purposes set out in this Privacy Notice, or as required by law. Our specific retention periods are:

  • Order and invoice data: 6 years from the date of the transaction, as required by HMRC for tax and accounting purposes.
  • Newsletter subscribers: until you unsubscribe, plus 30 days for processing the removal.
  • Quote enquiry data: 12 months from the date of enquiry if no booking results.
  • Website analytics data: 26 months from the date of collection (Google Analytics default). Facebook Pixel data is retained for up to 180 days.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible, then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

8. Do We Collect Information from Minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at info@saltwind.catering.

9. What Are Your Privacy Rights?

In some regions (like the EEA, UK, and Switzerland), you have certain rights under applicable data protection laws. These may include the right:

  • To request access and obtain a copy of your personal information
  • To request rectification or erasure
  • To restrict the processing of your personal information
  • If applicable, to data portability
  • Not to be subject to automated decision-making

In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us at info@saltwind.catering.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your UK data protection authority (ICO).

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us at info@saltwind.catering.

Opting out of marketing: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us. You will then be removed from the marketing lists.

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ('DNT') feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

11. Do We Make Updates to This Notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated 'Last updated' date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

12. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at info@saltwind.catering or contact us by post at:

Salt Wind Catering
37 Fore Street
Redruth, Cornwall TR15 2AE
United Kingdom

13. How Can You Review, Update, or Delete the Data We Collect from You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To request to review, update, or delete your personal information, please email us at info@saltwind.catering or call us on 01209 206255.