Privacy Policy

Main Line Café ("Main Line", "we", "us") operates from Sandown Road, Watford, WD24, and the website mainlineprovisions.co.uk. We are the data controller for the personal data described here. Contact us at hello@mainlineprovisions.co.uk.

We only collect what you give us:

• Launch waitlist: first name, email address, and optionally a phone number.
• Newsletter: email address.
• Careers & supplier enquiries: name, email, phone, and the details you include.
• Orders & reservations: the items, times, and contact details needed to fulfil them.

• Consent — to send you launch updates and marketing you opted into. You can withdraw at any time.
• Contract — to process orders, reservations, and enquiries you make.
• Legitimate interests — to run and secure the site and understand basic, aggregated usage.

We do not sell your data. We share it only with processors that run the service on our behalf — our hosting provider (Vercel), our database (Supabase), our email provider (Resend), and our payment processor (Stripe) — under appropriate data-protection terms.

When you pay online, your card details are entered directly with Stripe and are processed by Stripe, not by us — we never see or store your full card number. Stripe shares back only what we need to fulfil your order (such as a payment reference and confirmation that payment succeeded).

We keep waitlist and marketing data until you unsubscribe or ask us to delete it. Order and enquiry records are kept only as long as needed for the purpose and any legal obligations.

Under UK GDPR you can access, correct, delete, restrict, or port your data, and object to processing or withdraw consent. Email hello@mainlineprovisions.co.uk and we will respond within one month. You can also complain to the ICO at ico.org.uk.

We always use the essential cookies needed to run the site (including your login session if you have an account). With your consent — given through our cookie banner — we also use analytics and marketing cookies (such as Google Analytics/Tag Manager and the Meta/Facebook Pixel) to understand site traffic and measure our advertising. The lawful basis for these is your consent. You can decline them, and you can withdraw consent at any time via the cookie settings; declining leaves only the essential cookies.