Privacy policy
Last updated: July 16, 2026
CoChilli respects your privacy and is committed to handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store and share personal information when you visit the CoChilli website, contact us, make an enquiry, join our mailing list, interact with us through WhatsApp, or place an order through the CoChilli Pro online store.
1. Who is responsible for your personal information?
The company responsible for your information depends on how you interact with us.
CoChilli Pro
For CoChilli Pro product browsing, online orders, trade enquiries, delivery, customer support and related communications, the data controller is:
CoChilli Pro Ltd
Company number: 17309712
90 Clayton Road
Hayes
Middlesex
UB3 1BA
United Kingdom
CoChilli Events & Caterers and CoChilli Eats
For catering enquiries, event bookings, CoChilli Eats enquiries, food-club communications and general service enquiries, the data controller is:
CoChilli Foods Ltd
Company number: 15493192
90 Clayton Road
Hayes
Middlesex
UB3 1BA
United Kingdom
If you are unsure which company is responsible for your information, contact us and we will clarify this for you.
2. How to contact us about privacy
For privacy questions, requests or concerns, please email:
hello@cochilli.co.uk
Subject line: Privacy Request
You may also write to the relevant company at the registered address shown above.
3. Information we collect
Depending on how you interact with us, we may collect:
- Your name, email address, telephone number and postal address
- Account, order, payment, delivery and refund information
- Information included in messages, contact forms, reviews or customer-service enquiries
- Catering enquiry details, including event date, venue, guest numbers, menu preferences and budget information
- Information about your use of our website, including IP address, browser type, device information, pages viewed and cookie preferences
- Marketing preferences, including whether you have chosen to receive email, WhatsApp or other marketing communications
- Information you provide about allergens, dietary requirements or accessibility needs
We do not usually need to collect sensitive personal information. Where you choose to provide allergy, dietary or health-related information, we will only use it where necessary to respond to your request, assess whether we can safely provide food, or fulfil an agreed catering service.
4. How we use your information
We may use your personal information to:
- Process and deliver CoChilli Pro orders
- Take payment, issue refunds and deal with order queries
- Provide customer support
- Respond to catering, Events & Caterers and CoChilli Eats enquiries
- Prepare quotations, menus, event proposals and booking documentation
- Manage trade and wholesale enquiries
- Communicate important service, order, delivery or booking updates
- Improve our website, products, services and customer experience
- Protect our business, customers and website from fraud, misuse or security incidents
- Meet legal, tax, accounting, food-safety and regulatory obligations
- Send marketing communications where you have agreed to receive them, or where the law otherwise allows this
5. Our legal basis for using your information
We use personal information only where we have a valid legal basis to do so.
Contract
We use your information where it is needed to process an order, provide customer support, prepare for a booking, issue a quotation, deliver products or take steps requested by you before entering into a contract.
Legal obligations
We may retain or share information where needed to meet tax, accounting, food-safety, product-traceability, fraud-prevention or other legal obligations.
Legitimate interests
We may use information where necessary for legitimate business interests, provided your rights and interests do not override ours. This may include improving our services, maintaining website security, responding to enquiries, preventing fraud and managing customer relationships.
Consent
We rely on consent where required, including for non-essential cookies, certain marketing communications and some allergy or dietary information.
You can withdraw consent at any time. This will not affect the lawfulness of any use made before you withdrew consent. In some cases, withdrawing consent may mean we cannot safely provide a requested service.
6. Events & Caterers and CoChilli Eats
The CoChilli Events & Caterers and CoChilli Eats sections of the website are currently for information and enquiries only.
They do not currently offer online checkout, payment, collection or delivery ordering through the website.
If you submit an enquiry, we may use your information to respond, prepare a quotation, discuss menu options or arrange a future booking. If you later confirm a catering booking or Eats order, additional terms and privacy information may apply.
7. Marketing communications
We may send you news, offers, product updates, menu announcements or event-related communications by email, WhatsApp or other electronic channels where you have opted in, or where we are otherwise permitted to do so by law.
You can opt out at any time by:
- Using the unsubscribe link in an email
- Replying to a WhatsApp message with a request to stop receiving updates
- Emailing hello@cochilli.co.uk
We will continue to send essential communications relating to an active order, refund, booking, safety notice or customer-service matter.
8. WhatsApp and food-club communications
If you contact us through WhatsApp, join a CoChilli WhatsApp group or join the CoChilli Eats food club, WhatsApp and Meta may process your information under their own privacy terms.
Please be aware that, in a WhatsApp group, other members may be able to see your phone number, profile name and profile image, depending on your WhatsApp settings.
We do not control how other group members use information visible within a WhatsApp group. Please do not share sensitive personal information in group chats.
9. Who we share information with
We may share relevant information with carefully selected service providers where needed to run our business and provide our services. These may include:
- Shopify, which hosts and supports the online store
- Payment providers shown at checkout
- Fulfilment providers, where engaged to fulfil CoChilli Pro orders
- Delivery and courier partners
- Website, email, marketing and customer-service providers
- Professional advisers, including accountants, insurers and legal advisers
- Government bodies, regulators, law-enforcement agencies or other parties where required by law
We only share information that is reasonably necessary for the relevant purpose.
We do not sell your personal information.
10. International transfers
Some of our service providers may process personal information outside the United Kingdom.
Where this happens, we will take appropriate steps to ensure your information remains protected, including using approved contractual safeguards or relying on another lawful transfer mechanism.
11. How long we keep information
We keep personal information only for as long as needed for the purpose it was collected.
Our usual retention periods are:
- Completed orders, invoices and payment records: up to 6 years after the end of the relevant financial year
- Successful catering bookings and related records: up to 6 years after the event
- Unsuccessful enquiries and quotations: up to 18 months
- Customer-service communications: up to 24 months after the matter is closed
- Marketing records: until you unsubscribe or withdraw consent, unless we need to retain limited information to respect your opt-out request
- Website analytics and cookie information: as set out in our Cookie Policy
We may retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.
12. Your rights
Depending on the circumstances, you may have the right to:
- Ask for access to your personal information
- Ask us to correct inaccurate information
- Ask us to delete information in certain circumstances
- Ask us to restrict how we use your information
- Object to certain uses of your information, including direct marketing
- Ask for your information in a portable format where applicable
- Withdraw consent where we rely on consent
To make a request, contact us using the details in section 2.
We may need to verify your identity before acting on your request.
13. Complaints
We would appreciate the opportunity to resolve any privacy concern directly.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.
14. Cookies and similar technologies
We use cookies and similar technologies to make the website work, understand how visitors use it and, where you agree, support analytics and marketing.
Please read our Cookie Policy for further information and to understand how you can manage your choices.
15. Security
We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
No online service can guarantee complete security. Please take care when sharing information online and do not send payment-card details by email, WhatsApp or social media.
16. Children
Our website and online store are not intended for children to make purchases independently.
If you believe a child has provided us with personal information without appropriate parental involvement, please contact us so that we can review the situation.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, legal obligations or business operations.
The latest version will always be published on this website with its effective date.