Tea Time Café

Data Controller: Rosa Fothergill, Tea Time Café, 87 Market Place, Thirsk, North Yorkshire YO7 1ET.
Contact: hello@teatimeyorkshire.co.uk

What we collect and why

How we store your data

Your data is stored securely in AWS (London region, eu-west-2). Passwords are hashed with PBKDF2-SHA256 and cannot be read by anyone, including the business owner. Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Access is restricted by role-based permissions.

Third-party processors

We use Amazon Web Services (AWS) to host this application. AWS acts as a data processor under a standard Data Processing Addendum. Your chat questions may be processed by Anthropic Claude AI (via AWS Bedrock) to generate business insights — no personal data is included in AI prompts beyond your display name.

Your rights under UK GDPR

• Access — Download a copy of all your data (use the button below)
• Rectification — Update your name and email in the My Profile tab
• Erasure — Request permanent deletion of your account and data
• Portability — Download your data in machine-readable JSON format
• Restriction / Objection — Contact the data controller
• Complaint — You can complain to the Information Commissioner's Office (ICO)

Last updated: April 2026. This notice will be updated if our data practices change.