A Toast to Toasties Ltd
Privacy Policy
Last updated: 7 November 2026
At A Toast to Toasties, we respect your privacy and are committed to handling your personal information responsibly.
This Privacy Policy explains how A Toast to Toasties Ltd collects, uses, stores and protects personal information when you visit our website, contact us, make a catering enquiry or book our services.
1. Who We Are
A Toast to Toasties is operated by A Toast to Toasties Ltd, a limited company registered in England and Wales under company number 17206515.
We are a Chester-based mobile catering business specialising in gourmet sourdough toasties and premium Frizzante sparkling wine for weddings, corporate events and private celebrations.
For the purposes of UK data protection law, A Toast to Toasties Ltd is the data controller responsible for personal information collected and processed in connection with our business.
- Registered company name
- A Toast to Toasties Ltd
- Company number
- 17206515
- Registered office
- 6 Paul Street, London, EC2A 4NA
- Contact email
- enquiries@atoasttotoasties.co.uk
2. Personal Information We Collect
Depending on how you interact with us, we may collect:
- Your name and email address.
- Your telephone number, where provided.
- Event type and date.
- Venue name or event location.
- Approximate number of guests.
- Catering preferences, including interest in Frizzante.
- Information provided through our enquiry form.
- Email correspondence and other communications.
- Booking details, quotations and invoices.
- Payment and accounting records.
- Dietary requirements and allergy information where necessary.
- Limited technical information processed by our website hosting and security services.
We only ask for information reasonably necessary to respond to your enquiry or provide our services.
3. How We Collect Information
We may collect personal information when you:
- Complete our website enquiry form.
- Contact us by email or telephone.
- Message us through Instagram.
- Request a catering quotation.
- Confirm a booking.
- Provide event or dietary information.
- Communicate with us about an existing booking.
We may also receive relevant information from wedding planners, event organisers or venues acting on your behalf.
4. How and Why We Use Your Information
Enquiries and quotations
We use your information to respond to enquiries, check availability and prepare personalised quotations.
Our lawful basis is generally taking steps at your request before entering into a contract. For enquiries made on behalf of organisations, we may rely on our legitimate interests in responding to business enquiries.
Managing bookings
We use customer and event details to confirm bookings, arrange catering and communicate about the event.
Our lawful basis is generally performance of a contract or steps taken before entering into one.
Payments and accounting
We use relevant information to issue invoices, record payments and maintain financial records.
Our lawful bases include performance of a contract and compliance with legal obligations.
Dietary requirements and allergies
We use relevant dietary information to assess and arrange catering requirements safely.
Where information reveals health conditions or other special category personal data, we will identify an appropriate additional condition under UK data protection law and obtain explicit consent where required.
Complaints and legal matters
We may use relevant records to respond to complaints, resolve disputes and establish or defend legal claims.
Our lawful bases may include legitimate interests or legal obligations, depending on the circumstances.
Website operation and security
Our website providers may process limited technical information to operate the website, receive enquiries and protect against spam.
Our lawful basis is generally our legitimate interests in operating a secure website.
Marketing
Submitting an enquiry does not automatically subscribe you to promotional emails.
If we introduce marketing communications, we will comply with applicable data protection and electronic marketing rules, including obtaining consent where required.
5. Website Enquiry Forms
Our website is hosted by Netlify, Inc.
We use Netlify Forms to process and store website enquiries.
When you submit an enquiry:
- Your information is sent to Netlify Forms.
- A copy is stored in our Netlify Forms dashboard.
- Once configured, Netlify email notifications send details of new enquiries to enquiries@atoasttotoasties.co.uk.
- A branded confirmation message appears on the website after successful submission.
We do not currently send automatic acknowledgement emails to customers.
Submitting an enquiry does not constitute a confirmed catering booking.
We do not use FormSubmit to process new enquiries.
6. Third-Party Service Providers
We use external providers where necessary to operate our business.
Netlify, Inc.
Provides website hosting, enquiry form processing and submission storage.
Akismet / Automattic
Provides spam-filtering services used as part of our website’s form protection arrangements, as identified by our developer.
GoDaddy
Provides our business email service, through which we receive and manage customer correspondence.
Sage
Provides our accounting software, which we use to manage invoices, financial records and relevant customer billing information.
Banking and payment providers
We may share information with our bank or payment providers where necessary to receive payments and manage transactions.
We do not sell personal information to third parties.
Where service providers process information on our behalf, we seek to ensure appropriate contractual and security arrangements are in place.
7. Cookies, Analytics and Website Fonts
Our website developer has confirmed that the current website does not use cookies or visitor-tracking technologies.
We do not currently use:
- Google Analytics.
- Meta Pixel.
- Advertising or remarketing trackers.
- Embedded Instagram feeds.
Our website fonts are hosted locally rather than being downloaded from Google’s servers.
Our website contains ordinary links to Instagram. If you follow these links, Instagram’s own privacy practices will apply.
Based on the website’s current configuration, no cookies or similar technologies requiring visitor consent have been identified.
If we introduce analytics, cookies or other relevant technologies in future, we will review this policy and introduce appropriate information and consent controls where required.
8. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal and accounting requirements.
Our retention arrangements are as follows.
Unsuccessful enquiries
We normally retain enquiries that do not result in a booking for up to 12 months after our last meaningful contact.
After this period, we delete the information unless there is a specific lawful reason to retain it longer.
Confirmed booking records
We normally retain relevant booking contracts, confirmations and necessary correspondence for six years after the event, where reasonably required for business administration, resolving disputes or potential legal claims.
We do not retain unnecessary personal information merely because a booking record is retained.
Invoices and accounting records
We retain invoices, payment information and accounting records for the periods required by applicable tax and company law.
These records may be held in Sage and other relevant business systems.
Dietary and allergy information
We retain dietary and allergy information only for as long as necessary for event preparation, food safety, complaints or applicable legal purposes.
Where no longer required, this information is securely deleted or removed from retained records where reasonably practicable.
Marketing information
If we introduce marketing communications, we will retain information needed to manage consent, preferences and objections in accordance with applicable law.
Review and deletion
Netlify Forms submissions and enquiry emails are not automatically deleted.
We therefore review our stored information every three months and delete records when their retention period has ended, unless there is a lawful reason for continued retention.
Where relevant information is stored in multiple systems, including Netlify, GoDaddy email and Sage, we take reasonable steps to apply the appropriate retention rules consistently.
9. International Data Transfers
Some of our service providers may process or access personal information outside the United Kingdom.
Netlify is based in the United States and provides international data transfer arrangements through its published Data Processing Agreement.
Our developer has identified Netlify’s participation in the EU–US Data Privacy Framework and its UK Extension, where applicable, alongside contractual transfer safeguards.
Akismet/Automattic may also process information internationally.
GoDaddy and Sage may use international infrastructure or subprocessors, depending on the services and arrangements in place.
Where personal information is transferred internationally, we will ensure that an applicable UK adequacy arrangement or appropriate safeguards are in place where required.
You may contact us for further information about relevant international transfer safeguards.
10. How We Protect Your Information
We take reasonable technical and organisational steps to protect personal information.
These include:
- Restricting access to business accounts and customer records.
- Using appropriate account security.
- Limiting access to people who need the information.
- Reviewing and deleting records that are no longer required.
- Using established service providers with appropriate security arrangements.
Although no online system can be guaranteed completely secure, we aim to manage personal information responsibly.
11. Instagram and Social Media
You may contact A Toast to Toasties through Instagram or other social media platforms.
We use information you voluntarily provide to respond to your message and discuss potential catering arrangements.
Social media platforms have their own privacy policies and may process information independently.
Our website links to Instagram but does not currently embed an Instagram feed.
12. Your Data Protection Rights
Under UK data protection law, you may have the right to:
- Request access to your personal information.
- Ask us to correct inaccurate information.
- Request deletion of information.
- Restrict certain processing.
- Object to certain uses of your information.
- Request transfer of eligible information.
- Withdraw consent where processing relies on consent.
These rights are subject to applicable conditions and exemptions.
You can object to direct marketing at any time.
To exercise your rights, please contact:
enquiries@atoasttotoasties.co.uk
We will respond within the timescales required by law, normally within one month.
13. Children’s Personal Information
Our catering booking services are primarily intended for adults organising events.
We do not intentionally collect personal information directly from children through our website enquiry form.
Where information about a child is provided for legitimate catering purposes, such as a dietary requirement, we will handle it carefully and only where necessary and lawful.
14. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
Automated spam filtering may be used to identify potentially unwanted website submissions.
15. Changes to This Privacy Policy
We may update this Privacy Policy if our business practices, website technology or legal requirements change.
The latest version will be published on our website with an updated date.
16. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact:
A Toast to Toasties Ltd
6 Paul Street
London
EC2A 4NA
United Kingdom
- Company number
- 17206515
- enquiries@atoasttotoasties.co.uk
17. Complaints to the Information Commissioner’s Office
If you have concerns about how we handle your personal information, please contact us so we can investigate.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
- ICO website
- ico.org.uk
End of Privacy Policy