Foodish Limited ("we", "us", "our") is a company registered in England and Wales. We operate street food markets in Central London under the trading name Streetfoodish.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Foodish Limited is the Data Controller responsible for your personal data.
Contact: francesco@streetfoodish.com | streetfoodish.com
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Responding to general enquiries | Name, email, message | Legitimate interests |
| Processing trader applications | All application data and documents | Legitimate interests / Contract |
| Assessing regulatory compliance | PLI, food hygiene, council registration, gas safety documents | Legal obligation / Legitimate interests |
| Trader management and communication | Name, email, phone, business details | Contract / Legitimate interests |
| Promotional photography and video | Images/video of stall and food | Consent |
| Improving our website and services | Usage data, cookies | Legitimate interests |
| Complying with legal obligations | As required by law | Legal obligation |
| Preventing fraud and ensuring security | IP address, usage data | Legitimate interests |
We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.
We use a small number of carefully selected third-party service providers who process data only on our behalf and in accordance with our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Formspree Inc. | Form submission processing and email delivery | USA (SCCs in place) |
| Cloudflare Inc. | Website hosting, CDN, DNS, security | USA/Global (SCCs in place) |
| Google LLC | Google Workspace email, Google Maps embeds | USA/Global (SCCs in place) |
| Make (Celonis SE) | Workflow automation | EU |
| GitHub Inc. (Microsoft) | Website source code hosting | USA (SCCs in place) |
We do not share your personal data with any third party for their own marketing or commercial purposes. We may disclose data to law enforcement or regulatory authorities if required by law.
Some of our third-party service providers are based outside the United Kingdom. Where we transfer personal data to countries without an adequate level of data protection, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses (SCCs) approved by the ICO. For further information, please contact us.
| Data Type | Retention Period | Reason |
|---|---|---|
| General enquiry data | 12 months | Ongoing correspondence management |
| Unsuccessful trader applications | 12 months | Reapplication / dispute resolution |
| Active trader records | Duration of relationship + 6 years | Legal and contractual obligations |
| Regulatory compliance documents | 6 years after last trade | Legal obligation (liability) |
| Financial records | 7 years | HMRC legal requirement |
| Website usage / server logs | 90 days | Security and performance monitoring |
| Promotional photos/videos | Until consent withdrawn | Consent-based processing |
When data is no longer required, it is securely deleted or anonymised.
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
To exercise any right, contact us at francesco@streetfoodish.com. We will respond within one calendar month. We may verify your identity before acting on your request. We will not charge a fee for reasonable requests but reserve the right to charge for manifestly unfounded or excessive requests.
Our website may use cookies and similar technologies to improve your browsing experience.
You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality. For more information, visit allaboutcookies.org.
We only send marketing communications with your explicit consent. We do not currently operate a mailing list. Should we introduce marketing communications in future, you will always have the right to opt out by clicking the unsubscribe link or by contacting us directly. Transactional communications (such as application confirmations) are not marketing communications.
We have implemented appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, secure email via Google Workspace, access controls, and use of reputable third-party processors. In the event of a personal data breach, we will notify you and the ICO without undue delay where required by law (within 72 hours).
While we take all reasonable steps to protect your data, no internet transmission or electronic storage is 100% secure.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If you believe we hold data from a child under 16, please contact us and we will delete it promptly.
Our website contains links to third-party websites including social media platforms and Google Maps. These have their own privacy policies for which we take no responsibility. We recommend reviewing the privacy policy of any third-party site you visit. The inclusion of a link does not imply our endorsement of that site.
Trader applicants are asked to provide explicit, freely given consent for Foodish Limited to use photographs and video of their stall, food, and trading activities for promotional purposes including our website, social media, and press. Refusal to grant consent will not affect your application.
You may withdraw this consent at any time by contacting us in writing. Please note that withdrawal does not require removal of already-published content, though we will make reasonable efforts to comply.
Members of the public attending our markets may be photographed or filmed. If you do not wish to appear in such content, please notify a member of our team on the day.
We review this policy periodically and will update the "Last updated" date when changes are made. Where changes are material, we will take reasonable steps to notify active traders. Your continued use of our website after changes constitutes acceptance of the updated policy.
Foodish Limited
Email: francesco@streetfoodish.com
Website: streetfoodish.com
We aim to respond to all queries within 5 working days and to formal data subject requests within one calendar month.
If you are unhappy with how we have handled your data, you may lodge a complaint with the Information Commissioner's Office (ICO):
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113 | ico.org.uk
We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.