We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website, place orders, use our kiosks, contact us, or otherwise interact with our business.

This policy is designed to comply with applicable UK laws, including:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Privacy and Electronic Communications Regulations 2003 (PECR)

Please read this policy together with our Terms & Conditions and Cookie Policy.

1. Who We Are

BB CHICKEN UK LTD, trading as BADBIRD, is the data controller responsible for your personal data.

Company Name: BB CHICKEN UK LTD
Trading Name: BADBIRD
Website: https://badbirdchicken.com/
Email: hello@badbirdchicken.com
Registered Address: Office 204 10 Courtenay Road, East Lane, Wembley, United Kingdom, HA9 7ND
Company Number: 17094907

If you have any questions about this Privacy Policy or your personal data, please contact us using the details above.

2. Who This Policy Applies To

This Privacy Policy applies to:

  • Website visitors
  • Customers placing orders online or in store
  • Customers using self-service kiosks
  • Customers ordering through delivery platforms
  • Newsletter subscribers
  • Competition entrants
  • Individuals contacting customer support
  • Business contacts making enquiries

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following information.

Information You Provide

  • Full name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address
  • Order details
  • Preferences or dietary information you choose to provide
  • Marketing preferences
  • Customer service messages
  • Competition or survey entries

Transaction Information

  • Purchase history
  • Order values
  • Refunds
  • Payment confirmations
  • Date, time and location of orders

Please note: payment card details are generally processed securely by payment providers and are not stored by BADBIRD unless expressly stated.

Kiosk and In-Store Ordering Data

When using self-service kiosks or digital ordering systems, we may collect:

  • Order selections
  • Store location
  • Receipt email or mobile number (if entered)
  • Transaction records
  • Session/device usage information
  • Time taken to complete orders
  • Technical diagnostics for system support

Automatically Collected Website Data

When visiting our website, we may collect:

  • IP address
  • Device type
  • Browser type
  • Operating system
  • Pages visited
  • Website usage behaviour
  • Referral source
  • Cookie identifiers

4. How We Collect Your Data

We collect data when:

  • You place an order online
  • You use an in-store kiosk
  • You order through a delivery partner
  • You create an account
  • You sign up to emails or promotions
  • You contact us
  • You enter surveys or competitions
  • You browse our website
  • You accept optional cookies

5. Lawful Bases for Using Your Data

Under UK GDPR, we only use your personal data where we have a valid legal basis.

Contractual Necessity

To:

  • Process and fulfil orders
  • Arrange collections or deliveries
  • Take payments
  • Issue refunds
  • Send order confirmations and receipts
  • Provide customer support

Legitimate Interests

To:

  • Improve our products and service
  • Operate and grow our business
  • Analyse customer demand and trends
  • Prevent fraud and misuse
  • Secure our systems
  • Train staff and improve operations
  • Manage complaints and legal matters

To:

  • Send marketing emails or SMS where required
  • Use non-essential cookies
  • Run optional surveys or promotions

You may withdraw consent at any time.

To comply with:

  • Tax and accounting rules
  • Consumer law obligations
  • Food safety obligations
  • Regulatory requests
  • Law enforcement requests where legally required

6. Platforms and Partners We Use

We use carefully selected service providers to help run our business. These providers may process personal data on our behalf.

StoreKit

We may use StoreKit to power online ordering, menu management, checkout, customer accounts, and order fulfilment.

Deliverect

We may use Deliverect to receive and manage orders from third-party delivery platforms and route them into our internal systems.

Mailchimp

We may use Mailchimp to manage newsletters, promotions, customer communications, and marketing preferences.

Usercentrics Web CMP

We use Usercentrics Web CMP to manage your cookie consent choices. You can accept or reject optional Analytics cookies and reopen your preferences using Cookie Settings in the footer.

Google Analytics 4

We use Google Analytics 4, provided by Google, to understand how visitors use our website and improve its content and performance. With Analytics consent, it uses cookies to measure pages visited, interactions, referral sources, and device and browser details. Reading or writing Analytics cookies requires your consent.

We also use Google Consent Mode for limited cookieless measurement before you make a cookie choice and when Analytics cookies are rejected. This does not read or write Analytics cookies. Google receives measurement signals such as page and referral information, consent state, and browser and device information. An IP address is received as part of the network request; Google states that Google Analytics does not log or store IP addresses. These signals support statistical measurement and modelling, rather than a complete record of every visitor.

We use this limited measurement to understand and improve our website. To the extent it involves personal data, we rely on our legitimate interests in understanding website use, subject to your rights and applicable consent requirements. Cookieless information is not automatically anonymous. We do not send giveaway form answers, customer contact details or our own customer identifiers to Google Analytics, and we disable Google signals and advertising personalisation in our website tag.

You can stop all Google Analytics measurement, including cookieless signals, using Stop all analytics. This is separate from rejecting Analytics cookies. The choice is stored in your browser and can be changed in our Cookie Policy.

See our Cookie Policy for the current measurement setup, cookie names, purposes and expiry periods, and Google’s privacy information for how Google processes information from sites using its services.

Payment Providers

We use secure payment processors to handle card and digital wallet transactions.

Delivery Platforms

Where you order via third-party marketplaces, those platforms may also process your data under their own privacy policies.

IT and Hosting Providers

We may use secure hosting, software, analytics, and technical support partners.

7. Marketing Communications

We may send offers, promotions, launches, or updates where:

  • You have opted in; or
  • We are permitted under PECR soft opt-in rules after a previous purchase or enquiry relating to similar products or services.

You can unsubscribe at any time by:

  • Clicking unsubscribe in emails
  • Following opt-out instructions in messages
  • Contacting us directly

We do not sell your personal data to third parties for their own marketing.

8. Sharing Your Personal Data

We may share your data where necessary with:

  • Ordering platform providers
  • Delivery and logistics partners
  • Payment processors
  • Marketing software providers
  • IT support and hosting providers
  • Professional advisers
  • Insurers
  • Regulators, courts, or law enforcement where legally required
  • Potential purchasers or investors in connection with business restructuring, sale, or investment (subject to confidentiality)

9. International Transfers

Some providers may process data outside the UK.

Where this happens, we ensure suitable safeguards are in place, such as:

  • UK adequacy regulations
  • International Data Transfer Agreements (IDTA)
  • Approved contractual protections

10. Data Security

We take security seriously and use appropriate measures including:

  • Encrypted systems and secure connections
  • Access controls
  • Password protection
  • Staff confidentiality obligations
  • Restricted data access
  • Monitoring for suspicious activity
  • Secure payment integrations

No online system is completely risk-free, but we take reasonable steps to protect your information.

11. How Long We Keep Data

We keep personal data only for as long as necessary.

Typical retention periods may include:

  • Financial and order records: up to 6 years
  • Customer enquiries: up to 24 months
  • Marketing records: until consent withdrawn or no longer active
  • Google Analytics 4: event data retention is set to 2 months and user data retention to 14 months. The user retention period resets when there is new activity from that user. These settings do not apply to standard aggregated reports, which may remain available for longer. Cookie expiry periods are separate and are described in our Cookie Policy.
  • Security logs: as reasonably required
  • Kiosk transaction records: operationally necessary periods

We may keep information longer where required by law or for legal claims.

12. Your Rights

Under UK GDPR, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to certain processing
  • Withdraw consent
  • Request portability of eligible data
  • Lodge a complaint

To exercise any rights, contact:

hello@badbirdchicken.com

We may need to verify identity before responding.

13. Complaints

If you are unhappy with how we use your data, please contact us first so we can try to resolve matters quickly and fairly.

You also have the right to complain to:

Information Commissioner’s Office (ICO)
https://ico.org.uk

14. Cookies

Our website uses cookies and similar technologies to:

  • Keep the website functioning
  • Remember preferences
  • Improve performance
  • Understand visitor behaviour
  • Support relevant marketing where consented

We use Usercentrics Web CMP to manage cookie consent. Google Analytics cookies are in the optional Analytics category and require your consent before they are read or written. Limited cookieless measurement can continue without Analytics cookie consent, as described in section 6. You can stop both cookie-based and cookieless measurement using Stop all analytics.

You can update preferences at any time using the cookie settings link on our website. Read our Cookie Policy for more information.

Our website may contain links to other websites or services. We are not responsible for their privacy practices. Please review their policies separately.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or technology changes.

The latest version will always be posted on this page with the revised “Last Updated” date.

17. Contact Us

BB CHICKEN UK LTD
Email: hello@badbirdchicken.com
Website: www.badbirdchicken.com