CAMDEN ORIGINAL
FUNKY CLUB REWARDS
COMING SOON
LEGAL COMPLIANCE • UK GDPR & PECR

PRIVACY & COOKIE POLICY

How Funky Chips London protects your personal data, handles loyalty stamps, and manages first-party measurement across all our London stalls, markets, pop-ups, and digital services.

Last Updated: August 2026
01

Data Controller & Scope

Funky Chips Ltd ("we", "us", or "our") is the Data Controller responsible for your personal data under the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

This policy applies to all customer interactions across our physical food stalls, pop-ups, festival concessions, digital kiosk menu boards, the Funky Club loyalty program, and our official website (funky-chips.com).

Company: FUNKY CHIPS LTD (Registered in England & Wales • Co. No. 13220255)

Official Contact: [email protected]

Flagship Operations: Camden Town, London, United Kingdom

02

Information We Collect

We strictly limit our data collection to what is necessary for food service, rewards, and website performance:

  • Funky Club Rewards: Digital stamp counts, pass verification tokens, and visit redemption timestamps processed securely via PerkLedger infrastructure using 1-click Google or Apple authentication.
  • Inquiries & Event Booking: Your name, email address, and event details when you contact us regarding catering, bulk orders, or feedback.
  • Till & Payment Transactions: Stall card payments are processed directly via certified PCI-DSS compliant terminals. We never receive or store raw payment card numbers.
  • Technical & Site Telemetry: IP address, device type, browser user-agent, and Core Web Vitals telemetry measured anonymously to ensure instant page load speeds.
03

Lawful Grounds for Processing

Under UK GDPR Article 6, we process your information under the following legal bases:

1. Contract

Delivering your digital stamp pass, validating checkout rewards, and providing free loaded chip treats.

2. Legitimate Interests

Securing stall checkouts, preventing till fraud, monitoring uptime, and optimizing kitchen efficiency.

3. Consent

Optional marketing communications, social media campaign measurement, and non-essential cookies.

04

Cookie & Measurement Policy (PECR)

We employ first-party measurement technologies routed through our own domain (funky-chips.com/metrics) powered by Cloudflare to ensure privacy and data minimization:

1. Strictly Necessary Cookies (Always Active)

Required for session security, kiosk service worker offline caching, and till validation. Cannot be disabled.

2. First-Party Analytics (Cloudflare Gateway / GA4)

Measures anonymous footfall trends, menu interactions, and Core Web Vitals performance without cross-site tracking.

3. Social & Campaign Pixels (TikTok & Meta)

Measures the engagement of viral street food campaigns and festival announcements. Fired only upon your explicit opt-in consent.

05

Trusted Data Processors

We work with vetted enterprise technology infrastructure providers bound by UK GDPR Data Processing Agreements (DPAs):

  • Cloudflare Inc.: Edge CDN routing, DDoS defense, and first-party Google Tag Gateway proxying.
  • PerkLedger: Secure digital loyalty stamp ledger infrastructure and web pass authentication.
  • Google LLC: First-party analytics and website performance diagnostics.

Where data is processed outside the UK, appropriate safeguards including the UK International Data Transfer Addendum and Standard Contractual Clauses (SCCs) are strictly enforced. We never sell or rent personal data.

06

Data Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy:

Loyalty Stamp Passes: Retained during active program participation. Passes inactive for more than 24 consecutive months are securely purged.
Inquiries & Catering Records: Retained for up to 12 months following event completion to ensure follow-up service quality.
Financial & Till Audit Logs: Retained for 6 years in strict compliance with UK statutory tax and accounting regulations (HMRC).
Telemetry & Web Analytics: Aggregated and anonymized with a standard 14-month retention window.
07

Your Statutory Privacy Rights

Under the UK Data Protection Act 2018 and UK GDPR, you have full statutory control over your information:

Right of Access: Request a full copy of your personal data held by us (Subject Access Request).
Right to Erasure: Request permanent deletion of your loyalty pass account ("Right to be Forgotten").
Right to Rectification: Request correction of inaccurate or incomplete information.
Right to Object: Object at any time to direct marketing communications or processing based on legitimate interest.

You also have the right to lodge a formal complaint with the Information Commissioner’s Office (ICO), the UK's independent data protection regulator (ico.org.uk • Helpline: 0303 123 1113).