Last updated: 3rd July 2026

This Privacy Policy explains how Pho & Roll (“we”, “us”, “our”) collects, uses and protects your personal information when you visit our website, contact us, place an order, make a booking, or apply for a job with us. We are committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Pho & Roll
1 Dean Bank Lane, Stockbridge, Edinburgh EH3 5BS, United Kingdom
Email: hello@phoandroll.co.uk
Phone: +44 131 273 8313

We are the “data controller” of the personal information you provide to us.

What Information We Collect

Depending on how you interact with us, we may collect:

Contact details – name, email address, phone number, postal address
Enquiry and booking details – date, party size, special requests, dietary requirements
Catering and event enquiries – occasion details, guest numbers, preferences
Job applications – name, contact details, CV, cover letter, and any information you choose to include in an application
Website usage data – collected automatically via cookies (see our separate Cookie Policy)
Communications – records of emails, calls or messages you send us

We do not knowingly collect information from children, and our services are intended for adults.

How We Use Your Information

We use your personal information to:

Respond to enquiries, bookings and catering requests
Process job applications
Send information you have specifically requested (e.g. confirming a booking)
Improve our website and services
Comply with our legal and regulatory obligations
Protect the security of our business and website

Our Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

Consent – where you have given clear permission (e.g. submitting a contact form)
Contract – where processing is necessary to fulfil a booking, order or catering request
Legitimate interests – where processing helps us run our business reasonably and does not override your rights (e.g. responding to general enquiries)
Legal obligation – where we are required to process data to comply with the law

Sharing Your Information

We do not sell your personal information. We may share limited information with:

Trusted service providers who help us operate our website, bookings, or email communications, under appropriate confidentiality and data protection terms
Regulatory or legal authorities, where required by law

We do not transfer personal data outside the UK unless a service provider requires it, in which case appropriate safeguards will be used.

How Long We Keep Your Information

We keep personal information only for as long as necessary for the purpose it was collected, typically:

Enquiry and booking data: up to 24 months
Job applications: up to 12 months, unless you are hired
Records we are legally required to retain (e.g. for tax purposes): as required by law

Your Rights

Under UK GDPR, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (“right to be forgotten”)
Object to or restrict certain processing
Request a copy of your data in a portable format
Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, contact us at hello@phoandroll.co.uk.

Complaints

If you have concerns about how we handle your personal information, please contact us first at hello@phoandroll.co.uk so we can try to resolve it. You also have the right to lodge a complaint with the UK’s data protection regulator:

Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date.

Contact Us

If you have any questions about this Privacy Policy, please contact:
Pho & Roll
1 Dean Bank Lane, Stockbridge, Edinburgh EH3 5BS
hello@phoandroll.co.uk
+44 131 273 8313

Privacy Policy