Privacy Policy
Otley Burger Limited | Trading as Otley Burger Company
Last updated: 27 October 2026
1. Who we are
Otley Burger Limited, trading as Otley Burger Company ("we", "us" or "our"), is responsible for personal
information collected through our website, direct customer interactions and our own business activities. Some
third-party ordering and loyalty services may act as separate controllers for information they collect; their
privacy notices also apply.
Contact: theotleyburgerco@outlook.com
Address: 66 Boroughgate, Otley, LS21 1AE, United Kingdom
Website: theotleyburgercompany.com
2. Information we collect
Depending on how you interact with us, we may collect your name, contact details, delivery address, order
details, payment status, correspondence, booking and event requirements, marketing preferences, and
loyalty account or reward activity made available to us. We may also receive technical information such as IP
address, browser details and website usage data through cookies or similar technologies. If you tell us about
allergies or dietary requirements, we use that information to fulfil your request and take appropriate care with it.
3. How and why we use information
We use personal information to process and deliver food orders; take payments and handle refunds; answer
enquiries; provide quotes and catering bookings; administer customer service; support loyalty benefits;
prevent fraud and protect our systems; keep accounting and tax records; and send promotions where
permitted. Our lawful bases under UK GDPR are, as appropriate: performance of a contract, compliance with
a legal obligation, our legitimate interests in operating and protecting our business, and consent where
required (particularly for certain marketing and non-essential cookies). Where allergy or dietary information
reveals health-related data, we handle it only where an appropriate additional legal condition applies.
4. Online orders and payments
When you order through our website or a linked ordering service, the details needed to prepare and fulfil your
order may be shared with the relevant ordering, delivery and payment providers. Payment card details are
normally handled by the payment provider rather than stored by us in full. A linked service may have its own privacy policy and checkout terms.
5. LOKE loyalty app
If you use a LOKE-powered loyalty service, information such as account identifiers, purchases, points,
rewards and communication preferences may be processed by LOKE and connected service providers to
operate the programme. The app provider may also process information for its own purposes as described in
its privacy notice. You can manage available app preferences through the app or contact us about information under our control.
6. Marketing
We may send offers, news and promotions by email or text where you have opted in or where another lawful
marketing rule applies. You can unsubscribe using the link in a marketing message, change relevant app
settings, or email us. Service messages about orders or bookings are not marketing and may still be sent when needed.
7. Website cookies and analytics
Our website may use cookies and similar technologies for core operation, security, ordering, preferences,
analytics and embedded third-party features. Non-essential cookies should only be set where the required
consent has been obtained, and you should be able to change your choice. Our website forms use Google
reCAPTCHA, which may process technical information to help prevent spam. The precise cookies and
third-party technologies in use can change with the website configuration; any cookie banner and cookie
details displayed on the site provide additional information.
8. Who we share information with
Where needed, we share limited information with website and hosting suppliers, ordering and delivery
platforms, payment processors, loyalty and till providers, IT support, email or marketing services, professional
advisers, and public authorities when legally required. We require processors acting for us to handle
information appropriately. We do not sell customer personal information.
9. International transfers
Some technology providers may process information outside the UK. Where UK data protection law requires
safeguards for a restricted transfer, we use an applicable adequacy arrangement or appropriate contractual and other safeguards.
10. How long we keep information
We keep information only for as long as reasonably needed for its purpose, including order fulfilment,
customer support, dispute resolution, fraud prevention and applicable legal obligations. Accounting and tax
records are generally retained for at least six years where required. Marketing contact details are kept until
you unsubscribe or they are no longer needed, subject to retaining a limited suppression record so we
respect your choice. Other records are reviewed and deleted or anonymised when no longer needed.
11. Keeping information secure
We use appropriate organisational and technical measures designed to protect personal information,
including limiting access to those who need it and using reputable service providers. No online system can be guaranteed completely secure.
12. Your rights
Subject to legal conditions and exceptions, you may ask to access, correct, erase or restrict use of your
personal information, object to certain processing, or receive certain information in a portable format. Where
processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You
also have the right to object to direct marketing at any time. Contact us using the email above; we may need to verify your identity.
13. Complaints
Please contact us first if you have concerns. You also have the right to complain to the UK Information
Commissioner’s Office (ICO) at ico.org.uk.
14. Children
Our website and loyalty offers are not intended to collect personal information from children without
appropriate permission where required. If you believe a child has provided information improperly, please contact us.
15. Changes to this notice
We may update this notice when our services, providers or legal obligations change. The latest version will be published on our website with a revised update date.