Privacy Policy
Last updated: 7 August 2026
This policy explains what personal information we collect through this website, why we collect it, how long we keep it and what rights you have over it. We have tried to write it in plain English rather than legal language.
Who we are
This website is run by SBA CIC, which operates The Angel Café & Community Hub, Bow Street, Langport, Somerset TA10 9PQ. SBA CIC is the data controller for the information described below, which means we are responsible for deciding how it is used.
You can reach us at hello@theangelcafelangport.co.uk or on 01458 251881.
What we collect, and why
When you use our contact form
We collect your name, email address, your phone number if you choose to give it, the subject you select and the message you write.
We use this only to read and reply to your enquiry. Our lawful basis is legitimate interests: you have contacted us and we need your details to respond. Your message is emailed to our team and also saved to our database, so that an enquiry is not lost if an email is deleted or filtered by mistake.
Technical information with your enquiry
Alongside your message we store your browser type (user agent) and a one-way scrambled version of your IP address. We cannot turn that back into your actual IP address. We keep it only to spot and block repeated spam or abuse of the form. Our lawful basis is legitimate interests: keeping the form usable.
When you pay for Meals on Wheels
Payments are handled by Stripe on their own secure pages. Your card details are given to Stripe, never to us, and we never see or store them. We receive confirmation that a payment succeeded, along with the name and email you gave Stripe, so that we can fulfil the order. Our lawful basis is performance of a contract.
Server logs
Our hosting provider keeps standard technical logs of requests to the site, which can include IP addresses. These are automatically deleted after a short period and are used only for security and diagnosing faults.
Visitor counts
Our hosting provider, Vercel, counts page views for us so we can see how busy the site is and which pages are being read. It sets no cookies, stores nothing on your device and does not follow you to other websites. It cannot identify you: each visit is turned into an anonymous number, and we only ever see totals. Our lawful basis is our legitimate interest in knowing whether the site is working.
Website analytics, only if you agree
We use Google Analytics to understand which pages people find useful. It is switched off by default. Google’s script does load on every page, so Google receives the request itself, but it starts in a state where it is not allowed to store anything on your device or record your visit: no cookies are set and no analytics data is collected unless you press Accept on the cookie banner. Our lawful basis is your consent, which you can withdraw at any time using the Cookie settings link at the bottom of any page.
If you do accept, Google receives information about your visit such as the pages you view, your approximate location and your device type. We have IP anonymisation switched on, and we only ever see totals and trends rather than individual visitors. Our cookie policy explains this in more detail.
What we do not do
We think it is worth being clear about this. This website:
- sets no cookies at all unless you accept analytics
- does not use advertising or marketing trackers of any kind
- does not track you across other websites
- does not load fonts or images from third-party servers
- does not add you to a mailing list
- never sells or rents your information to anyone
Who else handles your information
We use a small number of trusted suppliers to run the site. They act on our instructions and may only use your information to provide their service to us.
- Vercel — hosts the website and counts page views, without cookies
- Resend — delivers enquiry emails to our team
- Neon — provides the database where enquiries are stored
- Stripe — takes payments
- Sanity — stores the words and pictures on the site, not visitor information
- Google Analytics — website statistics, only if you accept
Some of these suppliers are based outside the UK. Where information is transferred abroad, it is protected by appropriate safeguards, such as the UK International Data Transfer Addendum.
We may also share information where we are required to by law, or to protect someone’s safety in line with our safeguarding responsibilities.
How long we keep it
- Contact form enquiries: deleted after 12 months, unless your enquiry has become an ongoing arrangement with us
- Payment and accounting records: kept for six years, as HMRC requires
- Server logs: kept only briefly by our hosting provider
Your rights
Under UK data protection law you have the right to:
- ask what personal information we hold about you, and get a copy
- ask us to correct anything that is wrong
- ask us to delete it
- ask us to restrict how we use it
- object to us using it
- ask us to transfer it to someone else
To do any of these, email hello@theangelcafelangport.co.uk. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Changes to this policy
If we change how we handle personal information, for example by adding analytics or an online booking system, we will update this page and change the date at the top.