Privacy Policy

Last updated: 14 June 2026

This policy explains how Noodle Box collects and uses personal information. We handle your data in line with the Data Protection (Jersey) Law 2018 and are accountable to the Jersey Office of the Information Commissioner (JOIC).

1. Who we are (Data Controller)

The data controller is Noodle Box, trading at Tamba Bowl, St. Peter, Jersey, Channel Islands. You can contact us about your data:

• By phone: 01534 490222
• In person/by post: Noodle Box, Tamba Bowl, St. Peter, Jersey

2. What we collect and why

When you place a phone order

• Your name, telephone number, and where relevant a collection time and order details — so we can prepare your order and contact you about it.
• Any allergy or dietary information you choose to tell us — so we can advise on suitable dishes.

When you use this website

• The site stores one small preference in your browser (your chosen page design). This stays on your device, is not personal information, and is never sent to us. See our Cookie Policy.
• Our hosting provider may keep standard server logs (e.g. IP address, browser type) for security and to keep the site running. These are not used to identify you.

3. Lawful basis for using your data

• Performance of a contract — to take and fulfil your order.
• Legal obligation — e.g. food safety and allergen duties.
• Legitimate interests — running the takeaway securely and efficiently.

4. Who we share it with

We do not sell your personal data. We only share it where necessary — for example with our IT/hosting provider, or where required by law or by a competent authority in Jersey. Any provider acting for us must keep your data secure and use it only on our instructions.

5. How long we keep it

We keep order information only as long as needed to provide the order and meet any legal, accounting or food-safety requirements, after which it is securely deleted or anonymised.

6. Keeping your data secure

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

7. Your rights

Under the Data Protection (Jersey) Law 2018 you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our use of your data;
• data portability where applicable;
• withdraw consent where we rely on it.

To exercise any right, contact us using the details in section 1.

8. Complaints

If you have a concern, please contact us first. You also have the right to complain to the regulator:

Jersey Office of the Information Commissioner (JOIC) — jerseyoic.org.

9. Children

This website is not directed at children, and we do not knowingly collect children's data through it.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it was last revised.