Privacy

Who we are

Poptata Chicken is operated by JAM Holdings Limited (company number 125771), registered office: 2A, 2 Neptune House, Marina Bay, Gibraltar GX11 1AA.

We are the controller of the personal data described here. Contact us about it at support@poptatachicken.com, by phone on +350 56021821, or at the truck: 4B Landport Tunnel, Gibraltar.

What we collect and why

When you order online: your name, mobile number, email address and any note you add to your order, together with what you ordered, the amounts and the times. We use them to take your order, prepare it, contact you about it if we need to, and hand it to you at the window. Your first name and your note appear on the kitchen ticket.

Payments are made through Stripe's secure payment page. We never see or store your card details. Stripe tells us whether a payment succeeded, and about any refund or dispute.

We need these details to carry out your order (the contract between us). We keep payment, refund and dispute records because the law and our accounts require it, and to deal with any problem with an order.

Browsing the website needs no personal details. The basket you build is kept on your own device until you order.

How long we keep it

Your name, phone number, email address and note are removed from our records 90 days after your order is finished (collected, cancelled or refunded), unless a payment dispute about the order is still open, in which case they are kept until it is closed.

Records we must keep for accounting, refunds, disputes and other legal obligations (the order number, what was ordered, the amounts, dates and payment references) are kept for as long as the law requires, without your contact details.

Who handles it for us

Stripe (payments); Supabase (our database, hosted in the EU, Ireland); Cloudflare (hosting the website, and its Turnstile security check, which helps us stop automated abuse of ordering and sign-in). They process data only to provide their services to us. Some of them may transfer data outside Gibraltar, the UK or the EU under the safeguards the law requires.

We do not sell your data and we do not use it for advertising.

Cookies and similar technologies

We use only what the site needs to work: your basket is saved on your device, and staff who sign in to the kitchen dashboard get a sign-in cookie. Cloudflare's security check runs when you order. We do not use advertising or analytics cookies.

Your rights

You may ask for a copy of your personal data, ask us to correct or delete it, object to or ask us to limit how we use it, and ask for it in a portable form. Contact us using the details above.

If you are not satisfied with our answer, you may complain to the Gibraltar Regulatory Authority, the data protection supervisory authority in Gibraltar.