Privacy Policy
Central Kosher (UK – London), operated under Chabad Belgravia (“we”, “us”, “our”).
Last updated: 7 June 2026
This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit centralkosher.co.uk, place an order, or otherwise interact with us. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are (Data Controller)
Central Kosher (under Chabad Belgravia) is the data controller responsible for your personal information. If you have any questions about this policy or your data, contact us at [email protected].
Information We Collect
- Personal information you provide – name, email address, phone number, billing and delivery address, and order details when you create an account or place an order.
- Payment information – when you pay, your card/payment details are entered and processed directly by our payment provider (see “Payments” below). We do not see or store full card details on this website.
- Device and usage information – IP address, browser type, device identifiers, and pages visited, collected automatically (subject to your cookie choices).
- Cookies and similar technologies – see our “Cookies” section below.
How We Use Your Information
- Order processing – to take payment, fulfil, and deliver your orders, and provide customer support (lawful basis: performance of a contract).
- Communications – to send order updates and, where you have opted in, newsletters and promotions. You can opt out at any time (lawful basis: consent / legitimate interests).
- Security and fraud prevention – to protect the website and detect spam and abuse (lawful basis: legitimate interests).
- Analytics and improvement – to understand how the site is used and improve it, only where you have consented to analytics cookies (lawful basis: consent).
Payments
Payments on this website are processed securely by PayPal (WooCommerce PayPal Payments), which also supports debit and credit card checkout. All card and payment data is collected and processed by PayPal under their own security standards (PCI-DSS). We do not store your card details on this website. For more information see the PayPal Privacy Statement.
Cookies
We use cookies and similar technologies to operate the website and, with your consent, for analytics and advertising. When you first visit, our cookie consent banner lets you accept or reject non-essential (analytics and marketing) cookies. Non-essential and third-party tracking tools are only loaded after you give consent, and you can change your preferences at any time via the cookie settings link in the footer. Essential cookies required for the site and checkout to function do not require consent.
Third-Party Service Providers
We share personal data only as needed with the trusted providers below, who act as our processors or independent controllers for the purposes shown. We do not sell your personal information.
- PayPal – payment processing.
- Google LLC – Google Analytics / Site Kit (website analytics), Google Ads & Google Merchant Center / “Google for WooCommerce” (advertising and product listings), Google AdSense (advertising), and Google reCAPTCHA (spam and bot protection). Loaded subject to your cookie consent. See the Google Privacy Policy.
- FluentSMTP / our email provider – delivery of transactional and notification emails.
- Elementor – website and form builder used to operate the site.
- Our website hosting provider – secure hosting and storage of website data.
These providers may process data outside the UK/EEA; where they do, appropriate safeguards (such as UK International Data Transfer Agreements or Standard Contractual Clauses) are in place.
How We Protect Your Information
The website is served entirely over a secure encrypted connection (SSL/HTTPS). We apply reasonable technical and organisational measures, including login protection and spam/bot filtering, to safeguard your data. No transmission or storage method is completely secure, so we cannot guarantee absolute security.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes above, including to meet legal, accounting, or reporting requirements. Order records are retained as required by UK tax and consumer law.
Your Rights
Under UK GDPR you have the right to access, correct, delete, or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact us at [email protected].
If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date.
Contact Us
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at [email protected].