Privacy policy.

We are The Scoop Company, a family gelato business with two parlours in Surrey:

• Warlingham: 369 Limpsfield Road, Warlingham CR6 9HA
• Oxted: 55 Station Road East, Oxted RH8 0AX

Our registered name is The Scoop Trading Ltd, company number 14704690, registered at 34 Croydon Road, Caterham, CR3 6QB.

We are the data controller for the information described here, which means we decide what is collected and why. We are registered with the Information Commissioner’s Office under number ZB610262.

For anything about your data, contact the owners at hello@thescoopcompany.co.uk or 01883 338331.

We only ask for what we need to do the thing you asked for. Every form on this site collects the following, and nothing else:

Booking a table, or a party

Your name, email, phone number, the date and time, how many of you there are, and anything you tell us about the occasion or access needs. We need this to hold the table and to reach you if something changes. Lawful basis: performance of a contract.

Cinema tickets

Your name, email, phone number, which showing, and how many adults and children. Lawful basis: performance of a contract.

Cake orders

Your name, email, phone number, the cake you built, your collection date, the message you want on it, and any allergy note you add. Lawful basis: performance of a contract.

Cart hire, activations and wholesale enquiries

Your name, company, email, phone number, the venue and date, and what you are planning. We use it to quote and to plan production. Lawful basis: steps taken at your request before entering a contract.

Job applications

Your name, date of birth, contact details, address, right-to-work confirmation, availability, your CV and your video, and anything you write in the form. We use it to decide who to interview. Lawful basis: steps taken at your request before entering a contract, and our legitimate interest in recruiting.

Our mailing list

Your name and email, and only if you ticked the box. That tick is separate from everything else on the form, it is never pre-ticked, and refusing it never affects your booking or your application. Lawful basis: consent, which you can withdraw at any time.

Visiting the website

Our host keeps standard server logs (IP address, the page requested, the time, and your browser type) for security and to keep the site running. We do not use these to build a profile of you. Lawful basis: our legitimate interest in running a secure website.

Allergy and dietary information is health data, which the law treats more carefully than the rest. We ask for it in two places, and only for a reason:

• On a cake order or a booking, so we can tell you honestly what is in what you are buying and keep you safe. We rely on your explicit consent, given by typing it into the form.
• On a job application, so we can keep you safe working around nuts, dairy and gluten in the kitchen. We rely on our obligations to you under employment and health and safety law.

It is only seen by the people who need it, it is never used for marketing, and you never have to give it. If you would rather tell us in person or on the phone than type it into a form, that is completely fine.

We do not sell your information, and we never share it for someone else’s marketing. It is handled by the services that run the site and our business:

Vercel

Hosts the website and runs its server code.

Supabase

Stores bookings, orders and enquiries. (not yet in use)

Stripe

Takes card payments. We never see your full card details. (not yet in use)

Resend

Sends confirmation emails and, if you asked for them, our updates. (not yet in use)

The Scoop Company CRM

Our own system, where the team manages bookings, cake orders and enquiries.

Meta (Facebook & Instagram)

Measures whether our ads brought you here. It sets a cookie and tells Meta which pages you looked at.

Each of them handles your data on our instructions only, under a contract that requires them to keep it secure. We will also share information where the law requires it, for example with environmental health, or if we are obliged to by a court.

We do not keep things forever. As a rule:

Orders and bookings

Six years after the order, because HMRC requires us to keep records of what we sold.

Enquiries that went nowhere

Two years, then deleted.

Unsuccessful job applications

Six months, including your CV and video, then deleted. If you would rather we deleted them sooner, just ask.

Mailing list

Until you unsubscribe, or until you have not opened anything from us for two years, whichever comes first.

Server logs

Up to 30 days.

This website sets no cookies. It runs no analytics, no advertising pixels, and no social media trackers, and it does not store anything on your device. That is why you have not been shown a cookie banner. There is nothing to consent to.

If that ever changes, we will ask you first and update this page before we do it.

Some pages link out to other sites: Deliveroo, Instagram, TikTok, Google Maps. Once you follow one of those links you are on their site, under their privacy policy, not ours.

Under UK data protection law you can ask us to:

• Show you what we hold about you, and give you a copy.
• Correct anything wrong or out of date.
• Delete it, where we do not have a legal reason to keep it.
• Stop or limit what we do with it.
• Hand it over to you or another provider in a portable format.
• Stop marketing to you, immediately, no reason needed, either by replying to any email or using the unsubscribe link in it.

Email hello@thescoopcompany.co.uk and we will reply within one month. It is free, and we will not treat you any differently for asking.

Plenty of our customers are children, and we would rather not hold their data at all. Bookings, tickets and orders are made by an adult, in the adult’s name, and the only thing we record about a child is how many are coming.

Job applicants must be 16 or over. If you believe we hold information about a child that we should not, tell us and we will delete it.

When we change this page we update the date at the top. If a change actually affects you, whether a new service handling your data, a new purpose or a cookie, we will say so clearly rather than quietly editing the text.

If you are unhappy with how we have handled your information, please tell us first at hello@thescoopcompany.co.uk. We would much rather put it right ourselves.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or on 0303 123 1113. You do not have to come to us first.