Last updated: 3rd July 2026
This Privacy Policy explains how Pho & Roll (“we”, “us”, “our”) collects, uses and protects your personal information when you visit our website, contact us, place an order, make a booking, or apply for a job with us. We are committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Pho & Roll
1 Dean Bank Lane, Stockbridge, Edinburgh EH3 5BS, United Kingdom
Email: hello@phoandroll.co.uk
Phone: +44 131 273 8313
We are the “data controller” of the personal information you provide to us.
What Information We Collect
Depending on how you interact with us, we may collect:
- Contact details – name, email address, phone number, postal address
- Enquiry and booking details – date, party size, special requests, dietary requirements
- Catering and event enquiries – occasion details, guest numbers, preferences
- Job applications – name, contact details, CV, cover letter, and any information you choose to include in an application
- Website usage data – collected automatically via cookies (see our separate Cookie Policy)
- Communications – records of emails, calls or messages you send us
We do not knowingly collect information from children, and our services are intended for adults.
How We Use Your Information
We use your personal information to:
- Respond to enquiries, bookings and catering requests
- Process job applications
- Send information you have specifically requested (e.g. confirming a booking)
- Improve our website and services
- Comply with our legal and regulatory obligations
- Protect the security of our business and website
Our Legal Basis for Processing
We rely on the following legal bases under UK GDPR:
- Consent – where you have given clear permission (e.g. submitting a contact form)
- Contract – where processing is necessary to fulfil a booking, order or catering request
- Legitimate interests – where processing helps us run our business reasonably and does not override your rights (e.g. responding to general enquiries)
- Legal obligation – where we are required to process data to comply with the law
Sharing Your Information
We do not sell your personal information. We may share limited information with:
- Trusted service providers who help us operate our website, bookings, or email communications, under appropriate confidentiality and data protection terms
- Regulatory or legal authorities, where required by law
We do not transfer personal data outside the UK unless a service provider requires it, in which case appropriate safeguards will be used.
How Long We Keep Your Information
We keep personal information only for as long as necessary for the purpose it was collected, typically:
- Enquiry and booking data: up to 24 months
- Job applications: up to 12 months, unless you are hired
- Records we are legally required to retain (e.g. for tax purposes): as required by law
Your Rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (“right to be forgotten”)
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time, where consent is the legal basis
To exercise any of these rights, contact us at hello@phoandroll.co.uk.
Complaints
If you have concerns about how we handle your personal information, please contact us first at hello@phoandroll.co.uk so we can try to resolve it. You also have the right to lodge a complaint with the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date.
Contact Us
If you have any questions about this Privacy Policy, please contact:
Pho & Roll
1 Dean Bank Lane, Stockbridge, Edinburgh EH3 5BS
hello@phoandroll.co.uk
+44 131 273 8313
