1. Who we are
lovetoastfranchise.co.uk is run by LOVE TOAST FRANCHISING LIMITED, a company registered in England and Wales with company number 17252678, whose registered office is at Unit 6, Cherrytree Farm, Blackmore End Road, Sible Hedingham, Halstead, Essex, CO9 3LZ. LOVE TOAST FRANCHISING LIMITED is the data controller for the personal information described in this policy, which means we decide how and why it is used. Our ICO registration number is [TO CONFIRM: ICO registration number].
If you have any question about this policy or how we use your information, email us at hello@lovetoast.co.uk.
2. What we collect and why
We only collect what we need. The table below sets out each kind of information, why we use it, and the lawful basis we rely on under UK data protection law (the UK GDPR and the Data Protection Act 2018).
| Information | Why we use it | Lawful basis |
|---|---|---|
Your franchise enquiry, from the form on /register: your name, email address, mobile number, the location or locations you are interested in, and the funds you have available to invest | To reply to your enquiry, talk to you about TOAST franchise opportunities, work out whether an opportunity is a realistic fit (franchises have minimum investment levels), and keep a record of our conversations. Your enquiry is passed to Partnerwise, our franchise consultants, who help us assess and progress it. | Legitimate interests (responding to your enquiry), and steps at your request before entering into a franchise agreement |
| Emails and calls | Whatever you choose to tell us when you contact us directly, so we can reply. | Legitimate interests (responding to you) |
| The postcode or town you search for on the opportunities pages | To show you the territories nearest to it. Your browser sends it to postcodes.io to turn it into a location. If you have accepted analytics, the search is also recorded with your other analytics. | Legitimate interests (giving you the result you asked for); consent for the analytics record |
| Website analytics, only after you accept analytics cookies | To understand how the site is used: the pages you view, how far you scroll, the links and buttons you click, the territories you look at, campaign tags in the link you followed, and the country and city our hosting provider derives from your connection. Your IP address itself is not stored. | Consent |
| Error diagnostics, only after you accept | To find and fix faults: the error, the full address of the page, your browser's user-agent, and the last 20 things you clicked or loaded. Nothing you type into a form is recorded. | Consent |
| Your cookie choice | To remember the choice you made in the cookie banner, so we do not ask on every page. | Legitimate interests (strictly necessary) |
| Basic technical data | Our hosting provider processes your IP address and browser details to deliver each page and protect the site against abuse. | Legitimate interests |
| Records we must keep by law | If an enquiry becomes a franchise agreement, to meet our legal and accounting obligations. | Legal obligation |
We do not sell your personal information, and we do not use it for automated decision-making that has a legal or similarly significant effect on you.
3. Cookies and similar technologies
We use only the cookies and storage the site needs to work until you tell us otherwise. Analytics and anything else non-essential stays off unless you accept it in the cookie banner. You can change your choice at any time using the “Cookie settings” link at the bottom of every page. Our cookies policy lists every cookie and item of storage the site uses.
4. Who we share it with
We share personal information only with the service providers who help us run the site, under contracts that require them to keep it secure and use it only on our instructions, and where the law requires us to.
| Provider | What they do for us | Where |
|---|---|---|
| HubSpot, Inc. | Provides the enquiry form and the system we keep enquiries in, under a data processing agreement. | United States (see below) |
| Partnerwise | Our franchise consultants. They receive your enquiry and help us assess and progress it, acting on our instructions. | UK |
| Google (reCAPTCHA) | Bot protection inside the HubSpot form. Sees your IP address, browser details and how you interact with the form, when the form loads. | United States |
| Vercel | Hosts the website and delivers every page. Supplies the approximate country and city our analytics uses. | Global network; United States company |
| Supabase | Hosts the database holding our analytics, error records and site content. | London (eu-west-2) |
| postcodes.io | Turns the postcode or town you type into the territory search into a location. What you type goes from your browser to this service. | UK |
| OpenFreeMap | Serves the map images on the opportunities pages. Sees your IP address and browser details, as any website does. Stores nothing on your device. | [TO CONFIRM: OpenFreeMap server location] |
| Cloudflare | Delivers a small script our own team uses to review pages of this site. It stays dormant for visitors and stores nothing on your device, but loading it shows Cloudflare your IP address and browser details. | Global network; United States company |
Where a provider processes information outside the UK, we make sure it is protected by UK adequacy regulations or by the UK International Data Transfer Agreement or Addendum. HubSpot, Inc. is certified under the UK Extension to the EU-US Data Privacy Framework, which is covered by UK adequacy regulations. You can ask us for more detail at any time.
5. How long we keep it
We keep personal information only for as long as we need it for the purpose it was collected for, and then delete it.
| Information | How long |
|---|---|
| Franchise enquiries, including our emails and notes about them | 2 years from your last contact with us, then deleted or anonymised |
| Records of an enquiry that becomes a franchise agreement | For as long as the agreement lasts, and six years after it ends |
| Website analytics | 26 months |
| Error records | 26 months |
| Your cookie choice | 1 year, then we ask again |
6. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- object to our using it where we rely on legitimate interests;
- ask us to transfer it to you or another organisation in a portable format;
- withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.
To use any of these rights, email hello@lovetoast.co.uk. It is free, and we will reply within one month. We may need to ask you to confirm your identity first.
7. How to complain
If you are unhappy with how we have handled your information, please tell us first at hello@lovetoast.co.uk so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, or 0303 123 1113.
8. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.
9. Contact us
LOVE TOAST FRANCHISING LIMITED, Unit 6, Cherrytree Farm, Blackmore End Road, Sible Hedingham, Halstead, Essex, CO9 3LZ. Email: hello@lovetoast.co.uk.