Privacy Policy
Active Date: 22/07/2026
Last Updated: 22/07/2026
1. Introduction
Welcome to TAU FOODS LTD (“TAU FOODS”, “we”, “us”, or “our”).
Your privacy is important to us. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, create an account, place an order, contact us or otherwise use our services.
This Privacy Policy applies to:
- www.taufoods.co.uk
- online ordering
- customer accounts
- Click & Collect services (where available)
- home delivery services
- customer support
- promotional communications
- all related services operated by TAU FOODS LTD.
By using our website, you acknowledge that you have read this Privacy Policy.
2. Who We Are
TAU FOODS LTD is a company registered in England and Wales.
Company Name
TAU FOODS LTD
Company Number
17274450
Registered Office
124 City Road
London
EC1V 2NX
United Kingdom
Telephone
07932323209
Website
For the purposes of UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, TAU FOODS LTD is the Data Controller of your personal information.
3. Scope of this Privacy Policy
This Privacy Policy applies whenever you:
- browse our website;
- create a customer account;
- place an order;
- purchase products;
- arrange delivery or Click & Collect;
- subscribe to newsletters;
- contact customer support;
- participate in promotions;
- leave reviews;
- communicate with us via email, telephone or contact forms;
- interact with our advertising or social media pages.
It also explains how we process your personal data when required to comply with our legal obligations.
4. The Information We Collect
Depending on how you use our website, we may collect the following categories of personal information.
Identity Information
This may include:
- first name
- last name
- title
- date of birth (where required for age-restricted products)
- proof of age (only where legally required)
Contact Information
Including:
- email address
- telephone number
- billing address
- delivery address
Customer Account Information
If you create a customer account, we may store:
- username
- encrypted password
- order history
- saved addresses
- wishlist (if enabled)
- communication preferences
- newsletter preferences
Passwords are encrypted and cannot be viewed by our staff.
Order Information
When you place an order we collect information such as:
- products ordered
- quantities
- prices
- discounts applied
- vouchers used
- order notes
- delivery instructions
- preferred delivery date (where available)
Payment Information
Payments are processed securely by authorised third-party payment providers. TAU FOODS LTD does not store your full debit or credit card details.
Depending on your chosen payment method, payment providers may collect:
- payment card information
- transaction identifiers
- payment authorisation status
- fraud prevention information
Delivery Information
To fulfil your order we may collect:
- delivery address
- contact telephone number
- recipient name
- delivery instructions
- safe place instructions (where requested)
Where delivery services are performed by TAU FOODS LTD employees or authorised contractors, only the information necessary to complete your delivery will be used.
Technical Information
When you browse our website, we automatically collect certain technical information, including:
- IP address
- browser type
- browser version
- operating system
- device information
- language settings
- referring website
- pages visited
- date and time of access
- session identifiers
- website performance data
Marketing Information
If you consent, we may collect:
- newsletter subscriptions
- email campaign interactions
- marketing preferences
- promotional interests
- survey responses
Analytics Information
We use analytics services to understand how visitors use our website.
This may include:
- pages viewed
- products viewed
- search terms
- shopping behaviour
- abandoned baskets
- conversions
- website performance metrics
Where possible, this information is aggregated or pseudonymised.
5. Special Categories of Data
We do not intentionally collect special category personal data unless it is necessary to fulfil your order or comply with legal obligations.
Examples may include:
- allergy-related information voluntarily provided by customers;
- accessibility requirements for deliveries;
- information required for resolving customer complaints.
Where such information is processed, we will do so only where permitted by applicable law.
6. Children
Our website is intended for adults. We do not knowingly collect personal information from children under the age of 18. Certain products available through our website, including alcoholic beverages, may only be purchased by customers who meet the minimum legal age requirements in the United Kingdom. Where required by law, age verification may be carried out before dispatch or upon delivery.
7. Lawful Bases for Processing
Under the UK GDPR, we process personal data only where we have a lawful basis.
These include:
Contract
Processing necessary to:
- process your order;
- deliver your products;
- manage customer accounts;
- provide customer support;
- process refunds;
- fulfil contractual obligations.
Legal Obligation
Processing required to comply with:
- tax legislation;
- accounting requirements;
- food safety legislation;
- consumer protection laws;
- anti-fraud obligations;
- court orders;
- requests from competent public authorities.
Legitimate Interests
We may process personal information where necessary for our legitimate interests, including:
- improving our website;
- preventing fraud;
- protecting our business;
- improving customer experience;
- analysing website performance;
- ensuring network security;
- managing complaints.
Where we rely on legitimate interests, we ensure that your rights and freedoms are not overridden.
Consent
We rely on your consent for activities such as:
- email marketing;
- optional cookies;
- promotional newsletters;
- certain marketing communications.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
8. How We Use Your Personal Information
We use your personal information only where it is necessary and lawful to do so.
Depending on how you interact with us, we may use your information to:
- process and fulfil your orders;
- create and manage your customer account;
- verify your identity where necessary;
- arrange deliveries or Click & Collect orders;
- communicate with you regarding your purchases;
- process payments and refunds;
- respond to customer enquiries;
- provide after-sales support;
- improve our products and services;
- personalise your shopping experience;
- detect and prevent fraud or suspicious activity;
- comply with legal and regulatory obligations;
- administer promotional campaigns and competitions;
- send marketing communications where you have consented;
- maintain internal business records;
- improve website performance and security.
We do not sell your personal information to third parties.
9. Sharing Your Personal Information
We only share personal information where it is necessary for operating our business or where required by law.
Depending on the circumstances, your information may be shared with:
- payment providers;
- delivery personnel;
- authorised contractors acting on behalf of TAU FOODS LTD;
- IT service providers;
- website hosting providers;
- cloud storage providers;
- email communication providers;
- marketing platforms;
- analytics providers;
- professional advisers;
- accountants;
- insurers;
- legal representatives;
- regulatory authorities;
- law enforcement agencies where legally required.
All third parties are expected to process personal information securely and only for authorised purposes.
10. Product Collection and Fulfilment
TAU FOODS LTD does not currently operate its own warehouse. Products may be collected directly from approved suppliers by TAU FOODS LTD or by authorised contractors acting on behalf of TAU FOODS LTD before being delivered to customers. Where products are collected from suppliers, customer personal information is not routinely disclosed unless such disclosure is necessary for the fulfilment of an order or required by law. Any third party acting on behalf of TAU FOODS LTD is required to handle personal information confidentially and in accordance with applicable data protection legislation.
11. Payment Providers
Payments made through our website are processed by secure third-party payment providers.
Depending on your chosen payment method, payment providers may process:
- payment card information;
- transaction details;
- billing information;
- fraud detection information;
- payment authentication data.
TAU FOODS LTD does not store full payment card numbers or card security codes. Payment providers are responsible for processing payment information in accordance with their own privacy policies.
12. Marketing Communications
If you choose to receive marketing communications, we may send you:
- newsletters;
- promotional offers;
- seasonal promotions;
- product announcements;
- discount campaigns;
- abandoned basket reminders (where enabled);
- customer satisfaction surveys.
Marketing communications may be delivered through platforms including:
- FluentCRM;
- Mailchimp;
- Omnisend.
You may unsubscribe at any time by:
- clicking the unsubscribe link included in marketing emails;
- updating your account preferences;
- contacting us directly.
Unsubscribing from marketing emails will not affect transactional communications relating to your orders.
13. Google Analytics
Our website uses Google Analytics to understand how visitors use our website.
Google Analytics may collect information including:
- pages visited;
- session duration;
- device information;
- browser information;
- approximate geographic location;
- referring websites;
- interactions with website features.
This information helps us improve our website and customer experience. Where required, analytics cookies will only be activated after your consent has been obtained.
14. Meta Pixel
We may use Meta Pixel to measure advertising performance and improve our marketing activities.
Meta Pixel may record information relating to:
- website visits;
- viewed products;
- completed purchases;
- abandoned shopping baskets;
- interactions with advertisements.
This information helps us measure the effectiveness of advertising campaigns. Where legally required, Meta Pixel will only operate after your consent has been obtained.
15. Cookies and Similar Technologies
Our website uses cookies and similar technologies for functionality, security, analytics and marketing purposes.
Cookies may be used to:
- remember your shopping basket;
- keep you signed into your account;
- remember your preferences;
- improve website performance;
- analyse visitor behaviour;
- personalise content;
- measure advertising effectiveness.
Further information is provided in our separate Cookie Policy.
16. Fraud Prevention
Protecting our customers and business against fraud is a legitimate interest.
We may process personal information for the purposes of:
- detecting suspicious orders;
- preventing payment fraud;
- preventing account misuse;
- investigating unauthorised access;
- protecting website security;
- complying with anti-fraud obligations.
Where necessary, information may be shared with payment providers, financial institutions or competent authorities for fraud prevention purposes.
17. Security Measures
We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include:
- SSL/TLS encryption;
- encrypted passwords;
- secure servers;
- access controls;
- user authentication;
- software updates;
- malware protection;
- firewall protection;
- monitoring of suspicious activity;
- secure backup procedures.
Although we use appropriate security measures, no method of electronic transmission or storage can be guaranteed to be completely secure.
18. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and regulatory obligations. Retention periods may vary depending upon the nature of the information. Examples include: Customer account information:
Retained until the account is deleted or becomes inactive, subject to legal obligations. Order information:
Retained for the period required under UK tax and accounting legislation. Customer service records:
Retained for a reasonable period to resolve enquiries and disputes. Marketing preferences:
Retained until consent is withdrawn or marketing records are no longer required. Where information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our internal data retention procedures.
19. International Transfers of Personal Information
Some of our trusted service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, TAU FOODS LTD will ensure that appropriate safeguards are in place to protect your information in accordance with the UK GDPR.
Such safeguards may include:
- UK International Data Transfer Agreement (IDTA);
- UK Addendum to the EU Standard Contractual Clauses;
- adequacy regulations adopted by the UK Government;
- contractual obligations requiring an appropriate level of protection.
International transfers will only take place where legally permitted.
20. Automated Decision Making and Profiling
We do not make decisions that produce legal or similarly significant effects solely by automated means.
Certain automated technologies may be used to:
- recommend products;
- personalise website content;
- identify potential fraud;
- improve marketing relevance;
- analyse shopping behaviour.
These activities are designed to improve customer experience and do not replace human decision-making where legally significant outcomes are involved.
21. Your Rights Under UK GDPR
Under UK data protection legislation, you have several rights regarding your personal information.
These rights include:
Right of Access
You may request confirmation of whether we process your personal information and obtain a copy of that information.
Right to Rectification
If your information is inaccurate or incomplete, you may ask us to correct it.
Right to Erasure
You may request that we delete your personal information where:
- it is no longer necessary;
- you withdraw consent where consent is the legal basis;
- you successfully object to processing;
- processing is unlawful;
- deletion is required by law.
Certain information may still need to be retained where required by legal or regulatory obligations.
Right to Restrict Processing
You may ask us to temporarily restrict processing in certain circumstances, including where the accuracy of personal information is disputed or where processing is unlawful.
Right to Data Portability
Where technically feasible and legally applicable, you may request a copy of certain personal information in a structured, commonly used and machine-readable format.
Right to Object
You may object to processing based on our legitimate interests. You also have the right to object to direct marketing at any time. Where you object to direct marketing, we will stop processing your personal information for that purpose.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect processing carried out before consent was withdrawn.
22. Exercising Your Rights
You may exercise any of your privacy rights by contacting us using the details provided at the end of this Privacy Policy. To protect your personal information, we may request reasonable proof of identity before responding to your request. We aim to respond to valid requests within one calendar month, although this period may be extended where permitted by law due to the complexity or number of requests.
23. Complaints
If you are dissatisfied with how we process your personal information, we encourage you to contact us first so that we may attempt to resolve your concerns. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority responsible for data protection. Nothing in this Privacy Policy limits your statutory rights.
24. Third-Party Websites
Our website may contain links to third-party websites operated by independent organisations. We are not responsible for the privacy practices, content or security of third-party websites. We recommend that you read the privacy policies of any external websites before providing personal information.
25. Website Security
TAU FOODS LTD continually monitors its website to help protect customers and business operations.
Security measures may include:
- encrypted communications;
- firewall protection;
- malware detection;
- software updates;
- server monitoring;
- suspicious activity monitoring;
- account security measures;
- login protection;
- backup and disaster recovery procedures.
Users are responsible for keeping their account passwords confidential.
If you believe your account has been compromised, please contact us immediately.
26. Customer Accounts
If you create an account with us, you are responsible for:
- maintaining the confidentiality of your login credentials;
- ensuring your account information remains accurate;
- notifying us of any unauthorised use of your account.
We reserve the right to suspend or disable customer accounts where fraudulent activity, misuse or security concerns are identified.
27. Business Transfers
If TAU FOODS LTD undergoes a business reorganisation, merger, acquisition, sale of assets or similar corporate transaction, personal information may be transferred to the new owner or successor organisation where permitted by law.
Any such transfer will continue to be subject to appropriate confidentiality and data protection safeguards.
28. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes in legislation;
- regulatory guidance;
- business operations;
- website functionality;
- new services;
- security improvements.
Where changes are significant, we will take reasonable steps to inform customers through appropriate means, such as a notice on our website or by email where appropriate.
The latest version of this Privacy Policy will always be available on our website.
29. Contact Us
If you have any questions regarding this Privacy Policy or the processing of your personal information, please contact:
TAU FOODS LTD
Company Number: 17274450 Registered Office: 124 City Road London EC1V 2NX United Kingdom Telephone: 07932323209 Email:contact@taufoods.co.uk
Website:
30. Governing Law
This Privacy Policy shall be governed by and interpreted in accordance with the laws of England and Wales.
Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales, except where mandatory consumer protection laws provide otherwise.
31. Document Version
Privacy Policy Version: 1.0
Prepared for:
TAU FOODS LTD
Company Number: 17274450
Website: https://taufoods.co.uk
Privacy Policy (Schedule A)
Schedule A – Categories of Personal Information
The table below provides additional information regarding the categories of personal information processed by TAU FOODS LTD.
| Category | Examples |
|---|---|
| Identity Information | Name, title, date of birth (where required), age verification information |
| Contact Information | Email address, telephone number, billing address, delivery address |
| Account Information | Username, encrypted password, order history, saved addresses |
| Order Information | Products purchased, quantities, pricing, promotions, order notes |
| Delivery Information | Delivery address, recipient details, delivery instructions |
| Payment Information | Transaction references, payment status, payment method (excluding full card details) |
| Marketing Information | Newsletter subscriptions, communication preferences |
| Technical Information | IP address, browser information, operating system, device information |
| Usage Information | Website activity, viewed products, basket activity, purchase history |
| Customer Support Information | Emails, telephone conversations, support tickets, complaints |
Schedule B – Purposes of Processing
We process personal information for one or more of the following purposes:
- creating customer accounts;
- processing orders;
- arranging deliveries;
- customer support;
- payment processing;
- fraud prevention;
- website administration;
- accounting;
- taxation;
- marketing communications;
- customer satisfaction;
- website analytics;
- legal compliance;
- internal reporting;
- business administration.
Schedule C – Lawful Basis Matrix
| Purpose | Lawful Basis |
|---|---|
| Processing customer orders | Contract |
| Customer accounts | Contract |
| Home delivery | Contract |
| Click & Collect | Contract |
| Customer support | Contract / Legitimate Interests |
| Accounting | Legal Obligation |
| VAT and tax records | Legal Obligation |
| Fraud prevention | Legitimate Interests |
| Website security | Legitimate Interests |
| Marketing emails | Consent |
| Website analytics | Consent (where required) |
| Cookie preferences | Consent |
| Legal claims | Legitimate Interests |
| Regulatory compliance | Legal Obligation |
Schedule D – Data Retention Periods
Retention periods may vary depending upon legal requirements and business necessity.
The following table provides general guidance.
| Record Type | Typical Retention |
|---|---|
| Customer account | Until account deletion or inactivity, subject to legal obligations |
| Orders | Up to 6 years following completion of the transaction, or longer where required by law |
| Accounting records | Up to 6 years or as required by HM Revenue & Customs (HMRC) |
| Customer enquiries | Up to 3 years |
| Complaints | Up to 6 years following resolution |
| Marketing consent records | Until consent is withdrawn or no longer required |
| Website security logs | Normally up to 12 months unless required for investigations |
| Fraud investigations | As long as reasonably necessary for legal or regulatory purposes |
Retention periods may be extended where required to establish, exercise or defend legal claims.
Schedule E – Categories of Recipients
Depending upon the services used, personal information may be disclosed to the following categories of recipients.
Payment Providers
Authorised payment processors responsible for securely processing customer payments.
Website Hosting Providers
Hosting providers responsible for operating and maintaining website infrastructure.
Website Maintenance Providers
Technical service providers assisting with website maintenance, updates and security.
Email Service Providers
Providers responsible for transactional and marketing communications.
Examples may include:
- Mailchimp
- FluentCRM
- Omnisend
Analytics Providers
Providers helping us understand website usage.
Examples may include:
- Google Analytics
Advertising Platforms
Advertising platforms used to measure and improve marketing campaigns.
Examples may include:
- Meta Pixel
Professional Advisers
Including:
- accountants;
- solicitors;
- auditors;
- insurers.
Public Authorities
Where legally required, information may be disclosed to:
- HM Revenue & Customs;
- law enforcement agencies;
- courts;
- regulatory bodies;
- other competent public authorities.
Schedule F – Security Measures
TAU FOODS LTD implements a range of technical and organisational security measures designed to protect personal information.
These may include:
- HTTPS encryption;
- SSL/TLS certificates;
- encrypted passwords;
- restricted administrative access;
- strong authentication controls;
- regular software updates;
- firewall protection;
- malware protection;
- server monitoring;
- backup procedures;
- access logging;
- vulnerability management;
- secure payment processing;
- least-privilege access principles.
Security measures are reviewed periodically and updated where appropriate.
Schedule G – Data Protection Principles
TAU FOODS LTD processes personal information in accordance with the UK GDPR principles.
These principles include:
Lawfulness, Fairness and Transparency
Personal information is processed lawfully, fairly and transparently.
Purpose Limitation
Information is collected only for specified, explicit and legitimate purposes.
Data Minimisation
Only information that is necessary for the relevant purpose is collected.
Accuracy
Reasonable steps are taken to ensure personal information remains accurate and up to date.
Storage Limitation
Information is retained only for as long as necessary.
Integrity and Confidentiality
Appropriate technical and organisational security measures protect personal information against unauthorised access, accidental loss or misuse.
Accountability
TAU FOODS LTD maintains appropriate policies, procedures and records to demonstrate compliance with applicable data protection legislation.
Final Statement
TAU FOODS LTD is committed to protecting the privacy, security and confidentiality of all customers, visitors and users of its services. We continually review our privacy practices to ensure compliance with applicable legislation and recognised industry standards while providing a secure and transparent shopping experience.