Plateful Cafe

Last Updated: May 10, 2025

1. Introduction

Plateful Cafe (“we,” “our,” or “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our charity, website, services, or facilities.

As a charity supporting refugees and asylum seekers, we understand the importance of privacy and data protection. We are committed to handling your information with care and in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Who We Are

Plateful Cafe is a registered charity 1202710 that helps refugees and asylum seekers through our catering services and support programs.

For the purposes of data protection law, Plateful Cafe is the data controller responsible for your personal information.

Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Postal Address: 22 honley rd, London SE6 2HZ
Phone: 07984239912

3. Information We Collect

We may collect the following types of personal information:

3.1 Information You Provide to Us

Contact information: Name, email address, postal address, phone number
Demographic information: Age, gender, nationality (only where relevant to our services)
Service information: Details of services you’ve accessed or support you’ve received
Donation information: Payment details, donation history, Gift Aid declarations
Employment information: For volunteers and job applicants
Communications: Emails, letters, and other communications with us
Feedback: Surveys, testimonials, or feedback you provide

3.2 Sensitive Personal Information

As a charity working with refugees and asylum seekers, we may sometimes need to collect sensitive personal information (also known as special category data), such as:

Information about immigration status
Health information related to service provision
Ethnic origin or nationality
Religious beliefs (where relevant to our services)

We only collect sensitive personal information when necessary to provide our services, with your explicit consent, or when permitted by law.

3.3 Information Collected Automatically

When you visit our website, we may automatically collect:

Technical information: IP address, browser type, operating system
Usage information: Pages visited, time spent on pages, links clicked
Cookies: Information stored in cookies (see our Cookie Policy for details)

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Providing Our Services

To provide support and services to refugees and asylum seekers
To manage your participation in our programs and activities
To communicate with you about our services
To customise our services to meet your needs

4.2 Administrative Purposes

To process donations and administer Gift Aid declarations
To maintain our records and improve data accuracy
To respond to your inquiries and support requests
To fulfill our legal obligations and internal policies

4.3 Communications and Marketing

To send you updates about our work and impact
To invite you to events or programs
To share information about ways to support our cause
To send newsletters and other communications you’ve requested

You can opt out of receiving marketing communications at any time by contacting us or using the unsubscribe link in our emails.

4.4 Research and Analysis

To evaluate and improve our services
To understand the needs of the communities we serve
To report to funders and stakeholders (using anonymised data where possible)
To measure the impact of our programs

5. Legal Basis for Processing

Under GDPR, we process your personal information based on one or more of the following legal grounds:

5.1 Consent

We process some personal information based on your consent, which you can withdraw at any time.

5.2 Contractual Necessity

We process information necessary to fulfill our obligations to you when providing our services.

5.3 Legal Obligation

We process information to comply with legal requirements, such as maintaining donation records for tax purposes.

5.4 Legitimate Interests

We may process your information based on our legitimate interests, such as:

Improving our services
Ensuring the security of our websites and services
Administrative purposes essential to our charitable mission
Communications essential to service delivery

We balance our legitimate interests against your rights and will not process data on this basis if your rights override our interests.

5.5 Vital Interests

In rare emergency situations, we may process personal information to protect someone’s life.

6. Data Sharing and Disclosure

We may share your personal information with:

6.1 Service Providers

Third-party service providers who help us operate our charity, such as:

Payment processors for donations
Email and communication platforms
Website hosting and maintenance providers
Database management services

All service providers are carefully selected and required to maintain appropriate security measures.

6.2 Partner Organizations

With your consent, we may share relevant information with partner organizations who help us deliver our services to refugees and asylum seekers.

6.3 Legal Requirements

We may disclose your information when required by law, such as:

In response to a legal process or court order
To comply with legal obligations
To protect our rights or the rights of others
In connection with an investigation of suspected illegal activity

6.4 With Your Consent

We will share your personal information with other third parties only with your explicit consent.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements.

Different retention periods apply to different types of information. Factors we consider when determining retention periods include:

The nature and sensitivity of the data
Legal obligations to retain data for certain periods
The purpose for which we process the data
Whether ongoing access to the data is needed to provide our services

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of sensitive data
Access controls and staff training
Regular security assessments
Physical security measures at our facilities

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Under GDPR and other applicable data protection laws, you have the following rights:

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you.

9.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal information.

9.3 Right to Erasure

You have the right to ask us to delete your personal information in certain circumstances.

9.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used format and to transmit that data to another controller.

9.6 Right to Object

You have the right to object to the processing of your personal information in certain circumstances, particularly for direct marketing purposes.

9.7 Rights Related to Automated Decision Making

You have rights related to automated decision-making and profiling. We do not currently make decisions based solely on automated processing that produce legal or significant effects.

To exercise any of these rights, please contact us using the email [email protected].

10. International Data Transfers

As a UK-based charity, we primarily process and store your data within the UK and European Economic Area (EEA). If we transfer your personal information outside the UK or EEA, we will ensure appropriate safeguards are in place to protect your data, such as:

Standard Contractual Clauses approved by the European Commission or UK authorities
Adequacy decisions recognizing that a non-EEA country has adequate data protection
Specific derogations in limited circumstances

11. Children’s Privacy

Our services are primarily directed at adults. We do not knowingly collect personal information from children under 13 without appropriate parental consent. If we work with children as part of our charitable activities, we take additional measures to protect their privacy and only collect information with appropriate consent from a parent or guardian.

If you believe we have collected personal information from a child under 13 without appropriate consent, please contact us immediately, and we will take steps to remove such information.

12. Cookie Policy

Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. For detailed information about the cookies we use and how to manage them, please see our separate Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the “Last Updated” date.

We encourage you to review our Privacy Policy periodically to stay informed about how we protect your personal information.

14. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can address your concerns.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection authority. Visit www.ico.org.uk for more information.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Postal Address: 22 honley rd,London SE6 2HZ
Phone: 07984239912