Privacy Policy
Last updated: 03.07.2026
1. About this policy
This policy explains how ASF Hospitality Limited collects, uses, and protects your personal information when you buy a gift voucher through our website, contact us, or otherwise deal with us. It also sets out your rights and how to exercise them.
For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ASF Hospitality Limited is the data controller responsible for your personal information.
2. Who we are and how to contact us
We are ASF Hospitality Limited, a company registered in England and Wales with company number 16694404, whose registered office is at 7 Marconi Gate, Stafford, ST18 0FZ.
If you have any questions about this policy or about how we handle your personal information, you can contact us at thequeensathorton@gmail.com.
3. The information we collect
Depending on how you interact with us, we may collect:
Information you give us: your name, email address, postal address, and telephone number when you place an order; the name and delivery details of a voucher recipient, where you are buying a voucher as a gift; and the content of any messages you send us.
Information collected when you make a purchase: details of the vouchers you buy, your order reference, and the date and amount of your purchase. Your card and payment details are handled directly by our payment provider and are not stored by us (see section 5).
Information collected automatically: technical information such as your IP address, browser type, and details of how you use our website, gathered through cookies and similar technologies. Please see our Cookie Policy for more detail.
4. How and why we use your information
We only use your personal information where the law allows us to:
to process your order, deliver your voucher, take and confirm payment, and provide related customer service, in order to perform our contract with you;
to keep records of transactions for accounting and tax purposes, in order to comply with our legal obligations;
to protect against fraud and to keep our website and systems secure, in our legitimate interests in running our business safely;
to respond to your enquiries and manage our relationship with you, on the basis of our legitimate interests or, where relevant, the performance of our contract; and
to send you marketing about offers and experiences you may be interested in, where you have agreed to it or where we are promoting similar experiences to existing customers, relying on your consent or our legitimate interests as appropriate.
Where we rely on your consent, you can withdraw it at any time by contacting us or by using the unsubscribe link in any marketing email. Withdrawing consent does not affect anything we did before you withdrew it.
5. Who we share your information with
We do not sell your personal information. We share it only where necessary, and only with parties who are required to keep it secure. These include:
Vouchable. Vouchable operates the platform we use to sell and administer gift vouchers. It processes personal information on our behalf and on our instructions as a data processor, under a written agreement that requires it to keep your information secure and to use it only for the purposes we have set. Vouchable's role is limited to providing and supporting the voucher platform.
Our payment provider. Payments are processed by Stripe, which handles your card details directly under its own terms and privacy policy. We do not receive or store your full card details.
Delivery partners, where you order a physical voucher. We share the recipient's name and delivery address so that your voucher can be posted.
Professional advisers and authorities, such as our accountants, auditors, or legal advisers where needed, and regulators, law enforcement, or other authorities where the law requires or permits it.
6. International transfers
Most of your information is held within the UK. Where any of our providers process personal information outside the UK, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or equivalent protections recognised under UK data protection law.
7. How long we keep your information
We keep your personal information only for as long as we need it. In general, we hold order and transaction records for six years in order to meet our accounting and tax obligations, and we keep marketing contact details until you ask us to stop contacting you or withdraw your consent. Once information is no longer needed, we securely delete or anonymise it.
8. How we protect your information
We take appropriate technical and organisational measures to keep your personal information secure and to protect it against loss, misuse, or unauthorised access. Where we use processors, we require them to apply equivalent protections.
9. Your rights
Under UK data protection law you have a number of rights in relation to your personal information. You can:
ask for a copy of the personal information we hold about you;
ask us to correct information that is inaccurate or incomplete;
ask us to delete your information in certain circumstances;
ask us to restrict or object to how we use your information;
ask us to transfer your information to another provider in certain circumstances; and
withdraw your consent where we rely on it.
To exercise any of these rights, please contact us using the details in section 2. We will respond within the time limits set by law. There is normally no charge, although we may decline or charge for requests that are clearly unfounded or excessive.
10. Complaints
If you have a concern about how we handle your personal information, we would ask you to contact us first so that we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk or by calling 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. Where we make significant changes, we will take reasonable steps to let you know. The date at the top of this policy shows when it was last updated.