PRIVACY POLICY

Last updated: 10-23-2026

1. Data Controller

• Business name: Golden Fried Chicken (GFC)
• Legal owner: [FULL LEGAL NAME OR COMPANY NAME, e.g. “Roy Jangra” or “XYZ S.L.”]
• NIF/CIF: [TAX ID NUMBER]
• Address: Calle Torrelavega 64, bajo, 33010 Oviedo, Asturias, Spain
• Phone: +34 684 664 025
• WhatsApp: +34 623 350 952
• Email: [support@goldenfriedchicken.es]
•  

2. What Data We Collect

When you use our website or place an order, we may collect:

• Identification and contact data: name, phone number, email address
• Delivery data: delivery address and delivery instructions
• Order data: products ordered, order history, allergy or dietary notes you give us
• Account data: username and password, if you create an account
• Payment data: processed securely by our payment provider [e.g. Stripe / Redsys / PayPal]. We do not store your full card details.
• Technical data: IP address, browser type, and cookies (see our Cookie Policy)
•  
• 3. Why We Use Your Data and Legal Basis

4. How Long We Keep Your Data

• Order and invoice data: for the period required by Spanish tax and commercial law (generally up to 6 years)
• Account data: until you delete your account or ask us to delete it
• Marketing data: until you withdraw your consent
•  
• 5. Who We Share Your Data With

We never sell your data. We only share it when needed to provide our service, with:

• Delivery staff or delivery partners [e.g. Glovo / Uber Eats / Just Eat, if used]
• Payment processors [NAME]
• Our website hosting provider [NAME]
• Public authorities, when legally required

Some providers may process data outside the European Economic Area. If so, they use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Your Rights

You have the right to:

• access your personal data,
• correct inaccurate data,
• delete your data,
• object to or restrict processing,
• receive your data in a portable format,
• and withdraw consent at any time.

To use these rights, email [support@goldenfriedchicken.es] with your request and proof of identity. We will reply within one month.

If you believe we have not handled your data correctly, you can complain to the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

7. Security

We use appropriate technical and organisational measures to protect your data, including SSL encryption on our website.

8. Minors

Our services are not aimed at children under 14. We do not knowingly collect their data without parental consent.

9. Changes to This Policy

We may update this policy from time to time. The latest version will always be on this page.