Last Updated: 28 October 2025

1. Introduction

Welcome to Jo’s Buffets. We are a family-run catering business based in Plymouth, dedicated to providing delicious, beautifully presented food for all occasions. We are committed to protecting the privacy and security of your personal information. This privacy policy explains how we collect, use, and safeguard your data when you interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purpose of data protection law, the data controller is Jo’s Buffets.
Our Contact Details:
•Business Name: Jo’s Buffets
•Address: Plymouth, UK (Full address available on request)
•Phone Number: 07496 255 418
•Email for data protection queries: (We recommend setting up this email address)

2. The Information We Collect

We collect and process personal data to provide our catering services and manage our business. The types of personal information we may collect include:
Data Category
Examples of Data We Collect
Identity Data
First name, last name, title.
Contact Data
Email address, phone number, delivery address, billing address.
Event Data
Details about your event, including date, time, location, and number of guests.
Financial Data
Payment card details (processed securely by our third-party payment provider), bank account information for payments.
Transaction Data
Details about payments to and from you, and other details of services you have purchased from us.
Health Data (Special Category)
Information about dietary requirements, allergies, and food intolerances. We only collect this with your explicit consent to ensure the safety of you and your guests.
Technical Data
Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
Usage Data
Information about how you use our website and services.
Marketing and Communications Data
Your preferences in receiving marketing from us and your communication preferences.
We do not knowingly collect personal data relating to children under the age of 16 without parental consent.

3. How We Use Your Information

We use your personal data for the following purposes:
•To provide our services: To fulfil your catering order, manage your booking, and deliver our services for your event.
•To communicate with you: To respond to your enquiries, send you quotes, and provide you with important information about your booking.
•To process payments: To process payments for our services and manage our financial accounts.
•To ensure food safety: To cater to dietary requirements and prevent allergic reactions.
•To improve our services: To analyse how our website and services are used, and to make improvements.
•For marketing: To send you information about our services, special offers, and events, but only where we have your consent to do so.
•To comply with legal obligations: To comply with our legal and regulatory obligations, such as for tax and accounting purposes.

4. Our Legal Basis for Processing Your Information

Under UK GDPR, we must have a valid legal basis to process your personal data. The legal bases we rely on are:
•Contract: We process your data to fulfil our contractual obligations to you when you book our catering services.
•Consent: We rely on your explicit consent to process health data (allergies, dietary needs) and to send you direct marketing materials.
•Legitimate Interests: We may process your information for our legitimate business interests, such as improving our services, provided your rights and interests do not override ours.
•Legal Obligation: We may need to process your data to comply with a legal or regulatory requirement.

5. Who We Share Your Information With

We do not sell your personal data to third parties. We may share your information with trusted third parties who assist us in providing our services, including:
•Payment processors: To securely handle payments.
•IT and website providers: Including our website host and designer, Dead on Digital, to maintain our website and IT systems.
•Delivery partners: If we use a third-party service to deliver your order.
•Professional advisers: Including lawyers, accountants, and insurers.
•Government bodies: Where required by law, such as for tax purposes.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

7. Your Data Protection Rights

You have the following rights under UK data protection law:
•The right to be informed: You have the right to be informed about how we collect and use your personal data.
•The right of access: You have the right to request a copy of the personal data we hold about you.
•The right to rectification: You have the right to have inaccurate personal data rectified, or completed if it is incomplete.
•The right to erasure: You have the right to have your personal data erased (the “right to be forgotten”).
•The right to restrict processing: You have the right to request the restriction or suppression of your personal data.
•The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
•The right to object: You have the right to object to the processing of your personal data in certain circumstances.
•Rights in relation to automated decision making and profiling.
To exercise any of these rights, please contact us at .

8. How We Protect Your Data

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and third parties who have a business need to know.

9. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy (we recommend creating a separate, linked Cookie Policy page).

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page. This policy was last updated on 28 October 2025.

11. How to Contact Us

If you have any questions about this privacy policy or our data protection practices, please contact us at:
•Email:
•Phone: 07496 255 418

12. How to Complain

If you are unhappy with how we have used your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection issues.
•ICO website:
•ICO helpline: 0303 123 1113
We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.