Privacy policy

Last updated: 12 September 2026

1. Who we are

istanbul Charrgill (trading as Istanbulchargrill) is the "data controller" responsible for your personal data under the UK GDPR.

If you have any questions about this policy or the way we handle your personal data, you can contact us:

Address: 290 Mancheter Rd e, Little Hulton m38 9WQ
Email: [email protected]
Phone: +441617039566
Company number: 17453529

2. What personal data we collect

When you place an order or contact us, we collect:

your name
your email address
your phone number
your delivery address and postcode
the contents of your order and any notes you provide
payment confirmation details supplied by our payment processor (we never see your full card number)
anonymised analytics data about how you use our website (page views, device type, approximate location)

We collect this information directly from you when you place an order, sign up for an account, or contact us. We do not buy personal data from third parties.

3. Why we use your data and our lawful basis

We process your personal data for the following purposes, each with a lawful basis under Article 6 of the UK GDPR:

To prepare and deliver your order. Lawful basis: performance of a contract. We cannot accept your order without this information.
To process your payment. Lawful basis: performance of a contract. Payments are handled by Stripe, our payment provider; we never store your card details.
To keep accounting records. Lawful basis: legal obligation. HMRC requires us to retain certain transactional records.
To respond to your queries and complaints. Lawful basis: legitimate interests.
To send you marketing emails. Lawful basis: consent (or the PECR "soft opt-in" for existing customers).
To improve our website. Lawful basis: consent for non-essential analytics cookies.

4. Who we share your data with

We share the minimum data necessary with:

Stripe: our payment processor. They handle card details directly under their own privacy notice.
FoodEngine: the technology platform that powers our online ordering and dashboard. They are our data processor and act only on our instructions.
Our delivery riders: if you have ordered for delivery, they receive your name, address and phone number for the duration of the delivery.
Email providers: to send you order confirmations.

We do not sell your personal data to anyone, and we do not transfer it outside the United Kingdom or European Economic Area without appropriate safeguards.

Marketing emails

If you opt in, we may send you occasional emails about offers, new menu items or loyalty rewards. You can unsubscribe at any time using the link in the footer of every marketing email, or by emailing us at [email protected]. We process these emails on the lawful basis of consent. If you are already a customer, we may rely on the "soft opt-in" exception under PECR to email you about similar goods or services, and you can opt out at any time.

Website analytics

We use a privacy-respecting web analytics tool to understand how visitors use our website. This may set cookies in your browser. You can decline non-essential cookies via the consent banner that appears the first time you visit. The lawful basis is consent for non-essential cookies and legitimate interests for strictly necessary cookies (e.g. remembering your basket).

5. How long we keep your data

Order records: kept for 6 years to comply with UK tax law (HMRC).
Customer account data: kept until you ask us to delete it, or for 3 years of inactivity, whichever is sooner.
Marketing preferences: kept until you unsubscribe, then we retain a suppression record so we know not to contact you again.

6. Your rights

Under the UK GDPR you have the following rights, free of charge, in most circumstances:

Right of access: request a copy of the data we hold about you.
Right to rectification: correct anything we hold that is inaccurate.
Right to erasure ("right to be forgotten"): ask us to delete your data, subject to our legal-retention obligations.
Right to restrict processing: ask us to pause processing while we resolve a dispute.
Right to data portability: receive your data in a portable format.
Right to object: object to processing based on legitimate interests, including profiling.
Right to withdraw consent: for any processing based on consent, you can withdraw it at any time without affecting the lawfulness of past processing.

To exercise any of these rights, please email [email protected]. We will respond within one month.

7. Cookies

Our website uses cookies. Strictly necessary cookies (e.g. those that remember the contents of your basket) are always enabled because the site cannot function without them. Non-essential cookies (e.g. analytics) are only set with your consent, which you can give or withdraw via the cookie banner.

8. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at [email protected] so we can put things right. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

9. Changes to this policy

We may update this policy from time to time. When we do, we'll update the "last updated" date at the top of this page. Significant changes will be highlighted on our website.

This privacy notice is based on the UK ICO's model template for small businesses. It is provided as a starting point and does not constitute legal advice. If you are unsure whether it covers your specific processing activities, please consult a qualified solicitor.