Privacy Policy

Effective Date: 13 July 2026

At Hub & Spoke Café ("we", "our", "us"), we are committed to protecting your privacy and handling your personal information responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use and protect your personal information when you visit our website or contact us.

Who We Are

Hub & Spoke Café

Telephone: 01525 752367

Address:

6 Lincoln Way, Harlington,

Dunstable.

LU5 6NA

Information We Collect

We may collect the following information:

Information you provide

Name
Email address
Telephone number
Event or catering enquiry details
Messages submitted through our contact forms

Information collected automatically

When you visit our website we may collect:

IP address
Browser type
Device information
Pages visited
Time spent on our website
Referring website
General website usage statistics

This information is collected through cookies and website analytics.

How We Use Your Information

We use your information to:

Respond to enquiries
Provide quotations
Process catering or event enquiries
Improve our website
Communicate regarding bookings
Improve customer service
Prevent fraud and protect website security
Meet legal obligations

We will never sell your personal information.

Lawful Basis for Processing

We process personal information under one or more of the following legal bases:

Consent
Performance of a contract
Legitimate business interests
Legal obligations

Marketing

We will only send marketing communications where you have opted in or where permitted by law.

You may unsubscribe at any time by contacting us.

Sharing Your Information

We may share information with trusted service providers including:

Wix (website hosting)
Website analytics providers
Email service providers
Payment providers (where applicable)
Professional advisers where required
Government authorities where legally required

These providers only process information on our instructions or under their own privacy obligations.

Data Storage

Your information may be stored securely within Wix's hosting infrastructure and trusted third-party providers.

Wix may process certain information outside the UK using appropriate safeguards in accordance with UK GDPR.

Data Security

We take reasonable technical and organisational measures to protect your information, including:

Secure website hosting
SSL encryption
Password protected systems
Limited access to personal information

Although we work hard to protect your information, no method of online transmission is completely secure.

How Long We Keep Information

We only retain personal information for as long as necessary.

Typically:

Contact enquiries: up to 24 months
Catering enquiries: up to 7 years where required for accounting
Website analytics: according to analytics provider settings

Your Rights

Under UK GDPR you have the right to:

Access your personal information
Correct inaccurate information
Request deletion
Restrict processing
Object to processing
Request data portability
Withdraw consent

To exercise your rights please contact us using the details above.

Complaints

If you are unhappy with how we handle your information, you may contact us directly.

You also have the right to complain to the Information Commissioner's Office (ICO).

Third-Party Websites

Our website may contain links to other websites.

We are not responsible for their privacy practices.

Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always appear on this page.

If you have any questions regarding this Privacy Policy please contact us.