Privacy notice
Who we are
Banh Mi Phin, 02 Commercial Street, London E1 6LP. Contact: contact@phin.uk, 07762138556. We are the controller of the personal data described here.
What we collect and why
- Your name and email or mobile number, so we can prepare your order, email your receipt and contact you about it.
- Your order details and any notes you type (for example allergy notes), so we can make your food safely.
- Payment is handled by SumUp. We do not see or store your card number.
- Basic technical records when you use the site (your IP address in security and error logs), to keep the service secure.
Legal basis and how long we keep it
We use your details to perform your order (contract) and to keep accounting records (legal obligation).
- Name, email, mobile number and notes on an order: kept for 1 year after the order, then permanently removed from the order (anonymised).
- The order itself without your personal details (items, amounts, payment type, refunds): kept for as long as the law requires for business accounts (currently at least 6 years).
- Security and activity logs: routine entries and failed sign-in records are deleted after about 120 days; records of serious errors are kept up to 2 years.
- Backups: a daily copy of our database is kept for 14 days and then deleted, so removed data can remain in a backup for up to 14 days.
Who we share it with
SumUp (payments), our email provider (receipts) and our hosting provider. We do not sell your data or use it for marketing without your consent.
Your rights
You can ask to see, correct or delete your data, or object to how we use it, by emailing contact@phin.uk. If you ask us to delete your data we anonymise your orders (we keep the amounts for our accounts) and tell you when it is done. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We only use essential cookies and local storage (to keep your basket and keep staff signed in). We do not use advertising or tracking cookies.
Last updated: 14 October 2026