Privacy Policy

1. Introduction

This Privacy Policy describes how UndaPot may collect, use and handle information when visitors interact with this website.

It applies when you:

• Browse the website
• Place an order
• Request pickup or local delivery
• Submit a contact form
• Participate in the Fan Club
• Upload a Fan Club photograph or story

2. Information Visitors Provide

Depending on how you use the website, the information you provide may include:

• Name
• Email address
• Telephone number
• Company name and contact person for corporate orders
• Pickup or delivery preference
• Delivery address, where a delivery order is placed
• Order details, including items, quantities and any notes
• Selected pickup or delivery date and time
• Messages sent through the contact form
• Fan Club story content and story title
• Photographs uploaded to the Fan Club
• Country or region, and the local name you use for the food

We ask only for the information needed to respond to you or to prepare and fulfil an order.

3. Automatically Collected Information

As with most websites, normal web technologies may collect limited technical information when you visit, such as device and browser information, IP address, the pages you visit, basic usage information and cookie or local-storage information.

This website does not currently use a third-party analytics or advertising provider. If one is introduced in the future, this policy and the Cookie Policy will be updated to name it.

4. How Information May Be Used

Information may be used to:

• Process and prepare orders
• Provide pickup and local delivery
• Communicate with customers about their orders
• Respond to questions and enquiries
• Process Fan Club submissions
• Review and moderate submitted content
• Maintain and improve website functionality
• Prevent misuse, fraud and security issues
• Meet applicable legal and record-keeping obligations

5. Payment Information

Where online payment is enabled, payment processing is intended to be handled using established payment technology such as Stripe, or the payment gateway configured within the store platform.

UndaPot does not intentionally store raw card details within its own website code. Card numbers, security codes and payment provider secret keys are not held in this website's frontend.

6. Service Providers

Information may be shared only as reasonably required with the service providers used to operate the business, which may include providers for payments, website hosting, email, and order or delivery processing, and analytics if analytics is enabled in future.

Providers are expected to handle information only for the purposes of the services they supply.

7. Fan Club Submissions

• Stories and images submitted to the Fan Club are reviewed before any public display.
• Approved submissions may become publicly visible on this website and related brand channels.
• Contributor email addresses are not published.
• Public attribution uses only the display information approved for publication, such as a first name and country or region.
• You must have the right to submit any story or image you upload.

Submission does not guarantee publication.

8. Cookies

Information about cookies and browser storage used by this website is set out in the Cookie Policy.

9. Data Security

Reasonable measures are taken to protect information handled through this website. However, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure, and absolute security cannot be promised.

10. Data Retention

Information may be retained for as long as reasonably necessary for operational, contractual, legal, accounting, security or dispute-resolution purposes, after which it may be deleted or anonymised.

11. Privacy Choices and Requests

If you would like to request access to, correction of, or deletion of information you have provided, or have another privacy-related request, you can contact UndaPot at theundapotismine@gmail.com. Requests are handled subject to applicable law and any information we are required to retain.

12. Children

This website and ordering service are not intentionally designed to collect personal information from children where parental consent would legally be required. If you believe such information has been provided, please contact us so it can be reviewed.

13. Third-Party Links

This website may link to third-party websites or services. Those services operate under their own privacy practices, and this policy does not apply to them.

14. Policy Changes

This policy may be updated from time to time. The date shown as Last Updated at the top of this page indicates when it was most recently revised.

15. Contact

Questions about this Privacy Policy can be sent to theundapotismine@gmail.com.