Chowk47 legal
Cookie and Data Choices
This page explains what Chowk47 may store, why it is needed, whether it is optional, and how long it should be kept. Optional categories stay off unless you enable them. If a piece of information is mandatory for a booking, order, delivery, payment, staff access, or legal record, Chowk47 must ask for it at the point of need and must not keep it unless you continue with that service.
Last updated: 17 May 2026
1. Your choices
Strictly necessary storage is required for core website functions. Everything else below is optional and can be switched off.
Strictly necessary
Required for basket, checkout, cookie choice, fraud prevention, secure sessions, and basic website operation. This cannot be disabled because the requested service would not work.
Preferences
Remembers optional choices such as display preferences, fulfilment mode, and non-essential convenience settings.
Analytics
Allows Chowk47 to measure page usage, performance, referral sources, and aggregate visitor behaviour. No analytics should run unless this is enabled.
Marketing
Allows campaign measurement, advertising pixels, remarketing, and marketing attribution. This must remain off unless explicitly accepted.
Support and help
Allows optional support interaction context to be remembered. Formal enquiries or order-related support may still require information you provide at the time.
2. Mandatory data rule
If Chowk47 needs information to provide a service, the website must ask again at the point of need. For example, a table booking needs a name and contact details; delivery needs an address; payment needs a payment provider session. If the user does not provide mandatory information, that service must not continue and the information must not be retained.
If a user asks not to store their name, the default rule must be: do not store it unless the user proceeds with a service where a name is operationally required, such as a booking, order, refund, payment record, or legal/audit record.
3. What may be collected, why, and retention
| Category | Data | Purpose | Basis | Retention | Required? |
|---|---|---|---|---|---|
| Cookie consent choice | Consent category choices, timestamp, browser storage key. | To remember whether optional cookies are accepted or rejected. | Legal obligation / legitimate interest. | Until cleared by the user, changed on this page, or reset by browser storage deletion. | Required to remember cookie choice. |
| Basket and checkout | Cart items, quantities, fulfilment mode, delivery/collection choices, temporary checkout state. | To provide the ordering service requested by the user. | Contract / legitimate interest. | Session or short operational period. Cleared when checkout completes, expires, or is abandoned. | Required for ordering. If refused, ordering cannot continue. |
| Booking | Name, phone, email, party size, date, time, notes, booking reference, payment/deposit status if applicable. | To create, confirm, amend, manage, or cancel a reservation. | Contract. | Held for operational, accounting, dispute, and fraud-prevention needs, then deleted or anonymised. | Required for a booking. If refused, the booking must not be stored. |
| Delivery | Postcode, address, delivery notes, distance estimate, delivery fee, order reference. | To check delivery availability and fulfil delivery. | Contract. | Held only for the order, operational support, accounting, and dispute period. | Required for delivery. If refused, delivery cannot continue; collection may still be offered. |
| Payments | Payment status, payment reference, provider session/payment IDs, refund IDs. Card details are handled by Stripe/Square, not stored by Chowk47. | To process payment, confirm orders/bookings, handle refunds, prevent fraud, and reconcile finance. | Contract / legal obligation. | Accounting and transaction records retained as legally required, then deleted or anonymised. | Required for paid orders/bookings. |
| Account or staff/admin access | Login/session identifiers, role, access permissions, staff profile metadata, audit events. | To secure admin/staff systems and record operational actions. | Legitimate interest / legal obligation. | Retained for security, audit, incident, and accountability periods. | Required for staff/admin access. |
| Support and help chat | Questions typed into the help panel, postcode estimate checks, interaction context. | To answer questions and help with bookings, orders, delivery, allergies, and support. | Consent or legitimate interest depending on use. | Do not retain unless needed to respond, investigate an issue, or where the user submits a formal enquiry. | Optional unless needed to complete a request. |
| Analytics | Page views, browser/device information, approximate location, interactions, referral source. | To understand website performance and improve content. | Consent unless configured as a strictly limited exempt analytics use. | Only if accepted. Retain aggregated reporting data; avoid retaining user-level data longer than needed. | Optional. |
| Marketing | Ad identifiers, campaign attribution, remarketing signals, marketing pixels. | To measure and personalise marketing. | Consent. | Only if accepted. Retain according to provider limits and delete/anonymise when no longer needed. | Optional. |
4. Strictly necessary storage
This includes session security, basket operation, checkout flow, fraud prevention, cookie-choice storage, and basic website operation. These are not used for optional analytics or marketing.
5. Optional analytics and marketing
Analytics and marketing must not run until the relevant toggle is enabled. If enabled, Chowk47 should prefer aggregate reporting, minimise identifiers, and avoid retaining user-level analytics data longer than needed to produce reports.
6. Third-party providers
Stripe and Square may process payment, checkout, fraud-prevention, and transaction data when you use payment services. Google Maps may receive technical information when embedded maps are loaded. If analytics, advertising, email, or support tools are added later, they must be connected to the choices on this page before launch.
7. Withdrawal and deletion
You can change optional choices on this page at any time. You can also clear browser storage to reset local choices. For personal data held for bookings, orders, payments, refunds, support, or legal records, Chowk47 should provide a contact route for access, correction, deletion, restriction, objection, and complaint requests.
8. Developer implementation requirement
The cookie banner, analytics scripts, marketing scripts, help panel, booking flow, checkout flow, and delivery quote flow must read the saved consent object from local storage. Optional tools must stay disabled unless their category is true. Mandatory data must be requested again at the point of service and must not be retained if the user abandons or refuses that service.
localStorage key: chowk47_cookie_consent_v2
Required shape:
{
necessary: true,
preferences: boolean,
analytics: boolean,
marketing: boolean,
support: boolean,
updatedAt: string
}