Privacy Policy
Privacy Policy
Last updated: June 2026
Medley Catering is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. This policy applies to all personal data collected through www.medleycatering.com and any direct communications with Medley Catering.
Who We Are
Medley Catering is a sole trader food business based in London. We are the data controller for any personal data you provide to us directly. Our website is built and hosted on the Wix platform; Wix processes certain data on our behalf as a data processor. For information on how Wix handles data, please refer to the Wix Privacy Policy at wix.com/about/privacy.
List Title
What Data We Collect
We may collect the following personal data from you:
— Name and contact details (email address, phone number)
— Delivery address
— Order history and preferences
— Payment information (processed securely by our payment provider; we do not store card details)
— Messages and enquiries submitted via our contact form, email or WhatsApp
— Website usage data collected automatically by Wix (such as pages visited, device type and approximate location)
List Title
How We Use Your Data
We use your personal data to:
— Process and fulfil your orders
— Communicate with you about your order, including confirmation, collection or delivery details
— Respond to enquiries and customer service requests
— Improve our website and services
— Comply with our legal obligations
We do not use your data for automated decision-making or profiling. We do not sell your data to third parties.
List Title
Legal Basis for Processing
We process your personal data on the following legal bases:
— Contract: processing is necessary to fulfil your order
— Legitimate interests: responding to enquiries, improving our service
— Legal obligation: where we are required to retain records by law
How Long We Keep Your Data
We retain order and customer data for up to six years in line with HMRC record-keeping requirements for sole traders. Enquiry data is retained for as long as necessary to respond to your request and for a reasonable period thereafter.
List Title
Your Rights
Under UK GDPR you have the right to:
— Access the personal data we hold about you
— Request correction of inaccurate data
— Request deletion of your data (subject to legal retention requirements)
— Object to processing of your data
— Request restriction of processing
— Data portability
To exercise any of these rights, please contact us via our Contact page. We will respond within 30 days.
Cookies
Our website uses cookies via the Wix platform for functionality and analytics purposes. You can manage cookie preferences through the cookie banner on our website or through your browser settings.
Third Parties
We use the following third party services which may process your data:
— Wix (website hosting and checkout)
— Payment processor (active at checkout)
— Uber courier (delivery — only name and address shared where necessary for delivery)
Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be published on this page with the date it was last updated.
Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us via our Contact page or by WhatsApp at the number listed on our website.