McTurk Kebabs — Privacy Policy

Last updated: 17 August 2026

McTurk Kebabs ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains what information we collect when you order from us or use our website, how we use it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

McTurk Kebabs is a takeaway food business based in Derby, United Kingdom, operating the website mcturks.co.uk. We are the "data controller" responsible for your personal data.

• Contact for data/privacy matters: enquiries@mcturks.co.uk
• Postal address: 7 Morledge, Derby, DE1 2AW

If you have any questions about this policy or how we handle your data, please contact us using the details above.

What information we collect

When you place an order with us — online, by phone, or in store — and when you use our website, we may collect:

• Contact details: your name, phone number, email address, and (for delivery orders) your delivery address.
• Order information: the items you order, order value, date and time, order type (collection or delivery), any notes you add, and your order history over time.
• Offer and redemption information: which offers we have shown you, and which you have redeemed, so we can tailor future offers and understand what our customers value.
• Order messages: if you use the "Message us" link in your order email, the messages you send and our replies are stored with that order (for up to 30 days) so we can help you and keep a record of what was agreed.
• Payment information: card payments are processed securely by our payment provider (Stripe). We do not see or store your full card number — only confirmation that a payment succeeded.
• Technical information: basic information collected automatically by our website and hosting for security and to make the site work (for example, cookies and, briefly, your IP address).

How and why we use your information

We use your personal data to:

• Fulfil your order — prepare your food, take payment, and send you an order confirmation/receipt. *(Lawful basis: performance of a contract with you.)*
• Provide customer service — deal with questions, problems, or refunds. *(Lawful basis: contract and our legitimate interests.)*
• Understand and improve our service — analyse ordering patterns so we can improve our menu, deals, and how we run the business. *(Lawful basis: our legitimate interests in running and improving our business.)*
• Send you relevant offers — as an existing customer, we may include offers for our own similar food and deals in your order confirmations and other emails, chosen based on what you tend to order. You can opt out at any time (see below). *(Lawful basis: our legitimate interests, relying on the "soft opt-in" for existing customers under the Privacy and Electronic Communications Regulations (PECR).)*
• Meet our legal obligations — for example, keeping records required for tax and accounting. *(Lawful basis: compliance with a legal obligation.)*

We will never sell your personal data to anyone.

Offers and marketing — your choices

Because you are an existing customer, we may email you offers for our own food and deals (including offers tailored to what you usually order). You have the right to opt out of this at any time, and:

• Every offer email includes a clear way to opt out / unsubscribe.
• You were given the chance to say no to marketing when you placed your order.
• If you opt out, we will stop sending you offers but will still send you the confirmations needed to complete any orders you place.

To opt out at any time, use the unsubscribe link in any offer email, or contact us using the details above.

Who we share your information with

We only share your data with parties who help us run our business, and only as far as needed:

• Payment processing: Stripe (to take card payments securely).
• Website hosting and email: our hosting provider (Hostinger) and the services that deliver our emails.
• Delivery: where relevant, the details needed to deliver your order.
• Legal or regulatory bodies: where we are required to by law.

These providers are only permitted to use your data to provide their service to us, not for their own purposes.

How long we keep your information

• Order and payment records: kept for as long as required for tax and accounting purposes (generally up to 6 years, in line with HMRC requirements).
• Customer profile and offer/redemption data: kept while you remain a customer and for a reasonable period afterwards so we can offer you relevant deals; removed or anonymised if you ask us to, or after a long period of inactivity.
• Marketing preferences: kept for as long as needed to respect your choice (for example, to remember that you have opted out).

Cookies

Our website uses cookies to make it work properly, keep your basket, take payments securely, and understand how the site is used. You can control cookies through your browser settings. Essential cookies are needed for the site and ordering to function.

Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Erase your data ("right to be forgotten"), where applicable.
• Object to or restrict how we use your data, including for marketing.
• Data portability — receive your data in a portable format, where applicable.

To exercise any of these rights, contact us using the details above. We will respond within one month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would appreciate the chance to address your concerns first, so please do contact us before you approach the ICO.

Keeping your data secure

We take appropriate measures to protect your personal data against loss, misuse, and unauthorised access. Payments are handled by a secure, PCI-compliant provider, and access to customer data is restricted to those who need it to run the business.

Children

Our service is intended for adults. We do not knowingly collect data from children under 16 without appropriate consent.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on our website, with the "last updated" date shown at the top.

Contact us

For any privacy questions or requests, please contact:

McTurk Kebabs — enquiries@mcturks.co.uk — 7 Morledge, Derby, DE1 2AW

← Back to mcturks.co.uk