Privacy · Tokyoyaki

Who we are

Tokyoyaki is a market stall in the UK. We are responsible for the details you send us through this website.

Questions about your details? Email privacy@tokyoyaki.uk.

What we collect

We only collect details when you send the form on our Enquire page:

your name
your email address
your market or business, if you choose to give it
what your message is about
your message

When you send the form, two safety checks also run:

A limit on messages. We use your internet address (IP address) to stop anyone sending more than 5 messages a minute. It is only used for about a minute.
A robot check. Cloudflare Turnstile runs a quick check in your browser to tell people from robots. It looks at technical details such as your internet address and browser type.

We do not keep enquiries in a database. Your message arrives as an email in our inbox, and that is where it stays.

Cloudflare also keeps a short technical record each time the form is sent (this can include your internet address) for up to 7 days, so we can fix problems. We never write your message into these records.

You do not have to send us anything. But we need your name and email address to reply to you.

Why we use it, and our legal reason

The law asks us to say which legal reason (called a "lawful basis") we rely on.

To answer your enquiry. Our reason is "legitimate interests" (UK GDPR Article 6(1)(f)). In plain words: you wrote to us, and we need your details to reply. If you are asking to book us, it is also "steps before a contract" that you asked for (Article 6(1)(b)).
To keep the form safe from spam and robots. Our reason is "legitimate interests" (Article 6(1)(f)). In plain words: we need to stop junk messages and misuse of the form.

We do not sell your details. We do not use them for marketing. We do not make decisions about you by computer, apart from the robot check, which only decides whether the form can be sent.

Who else handles it

These companies handle your details for us. They act on our behalf.

Cloudflare runs this website, the robot check, and the service that sends your message to our inbox.
Google runs the Gmail inbox where your message arrives.

We do not share your details with anyone else unless the law requires it.

Sending details outside the UK

Cloudflare and Google work around the world, so your details may be handled outside the UK, for example in the United States. When that happens, safeguards that UK law allows are used. You can read how each company does this:

How long we keep it

We keep enquiry emails for 12 months after our last message, unless the conversation is still ongoing. Then we delete them.

Your rights

You have the right to:

ask for a copy of the details we hold about you
ask us to correct details that are wrong
ask us to delete your details
ask us to limit how we use your details
object to how we use your details
ask us to send your details to you or someone else in a common format, in some cases

To use any of these rights, email privacy@tokyoyaki.uk. It is free. We will reply within one month.

How to complain

If you are unhappy with how we use your details, please tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

website: ico.org.uk/make-a-complaint
phone: 0303 123 1113

Cookies and trackers

We do not set our own cookies. We do not use advertising or analytics trackers. Our fonts are stored with this website, so nothing is loaded from Google when you visit.

The robot check on the Enquire page comes from Cloudflare. It may store a small amount of information in your browser so it can work. Cloudflare says the information it collects is strictly necessary to spot and block robots, and is not used to identify, profile or target you.

Changes to this notice

If we change how we use your details, we will update this page and the date at the top.