Clear about what this site records.

Visiting the site

The page sets no advertising cookies and runs no advertising tags, and it sets an analytics cookie only after you have accepted one, as the Cookies section below explains. When you load it, our hosting and content-delivery provider processes your IP address, request time, requested URL, browser identifier and security events to deliver the page, route traffic and prevent abuse. That provider is Google, which runs the Firebase Hosting service this site is published on, and the raw Hosting request logs it generates are not exported to us. IP addresses in those logs are personal data, so this is processing even though you have given us nothing. We rely on our legitimate interests in providing a reliable, secure pre-launch site. We do not use this data for profiling or decisions about you.

Cookies

Nothing is stored on your device until you choose. On a first visit a prompt asks whether Google Analytics cookies may be set. Accept and Reject sit side by side and carry the same weight; closing the prompt without choosing counts as a refusal; and every page works in full either way. Until you accept, no Google tag is loaded and no analytics cookie exists.

If you accept, Google Analytics 4 sets two first-party cookies. _ga tells one browser apart from another and lasts two years. _ga_<id>, where the id identifies our analytics property, holds the state of your visit and also lasts two years. Both exist only to produce aggregate statistics about how this pre-launch site is used: how many visits there are, which pages people read, and broadly which country the traffic came from. They are not used to build a profile of you, to advertise to you, or to make any decision about you, and this property has Google Signals and ad personalisation switched off.

Google Ireland Limited and Google LLC act as our processor for that analytics data, and may process it outside the UK. Where that is a restricted transfer we rely on the UK Extension to the EU-US Data Privacy Framework, to which Google LLC is certified, together with approved contractual safeguards. Email us for details or a copy of the relevant safeguard.

One further item is strictly necessary, so it is set without asking: a first-party preference in your browser’s local storage, named urbanbite.consent, which records whether you accepted or rejected, when you did so, and which version of this notice you were shown. It exists only so that your choice is honoured and you are not asked again on every page. It stays on your device, is never sent to us or to Google, and an acceptance is treated as expired after six months, so consent is asked for again rather than assumed to still hold.

To withdraw consent, choose Cookie settings in the footer of any page and select Reject. Withdrawal takes effect at once: analytics storage is switched off, the _ga cookies this site can see are expired, and no Google tag is loaded on any later page. You can also clear cookies and site data in your browser at any time.

If you email us

There is no form and no way to submit anything to UrbanBite through this site, so anything we hold about you arrives because you chose to email it. If you choose to write to us, we process whatever you decide to include: your email address, your name if you give it, your message, any attachment, and any business details you choose to send — typically how and where you trade, how orders reach you today, and the systems you already use. Our contact page does ask about those three things, because a specific answer needs a specific question. None of it is required, no field obliges you to supply it, and an enquiry containing nothing but a question is a complete enquiry. You do not have to email us at all, but we cannot reply without an address and a message.

Why we may process it, and what we will not do with it

We rely on our legitimate interests in receiving, answering and administering genuine enquiries about our business. We assessed that a person who emails a company a question expects a reply and expects the message to be handled, and that answering it does not override their interests. We use enquiry correspondence only to respond to and manage the enquiry it belongs to. We do not add your address to a mailing list, we do not send marketing, and we will not contact you when UrbanBite launches. Emailing us subscribes you to nothing.

Recipients and international transfers

Recipients are our hosting/content-delivery, infrastructure and email providers acting for us, plus professional advisers or public authorities where law requires. Providers may process data outside the UK. Where that is a restricted transfer, we use UK adequacy regulations or approved contractual safeguards, including the UK International Data Transfer Addendum. Email us for details or a copy of the relevant safeguard.

How long we keep it

Held by Google, as our hosting provider. Google receives the IP address of every request to this site. Google’s published Firebase privacy documentation states that Firebase Hosting retains IP data for a few months, to detect abuse and to provide analysis of usage. Google sets that period, and it applies however we configure the site; we do not control it, we cannot shorten it, and we are not told when it ends. We publish no fixed number of hours or days for it, because Google publishes none — saying otherwise here would be inventing a precision Google does not give.

Held by UrbanBite. Firebase’s request-log integration is the only route by which those hosting logs would reach UrbanBite, and that integration is optional: it has to be linked to the project explicitly, it is switched off, and we have not enabled it for this site. While it stays off we receive no request logs and store none of them, and this site sends them to no external log drain. If we ever did enable it, Google documents 30 days as the default retention for those logs before they are deleted, and documents that retention as configurable rather than fixed, so we would say so here before switching it on.

Enquiries you send us. Enquiry correspondence is kept while the enquiry is active. Once it is resolved and no follow-up is reasonably expected, we delete it, and in any event at our next quarterly privacy review — so an enquiry is never held beyond the review that follows its resolution. The exception is correspondence that forms part of a contract, a legal duty or a claim, which we keep for the statutory period that applies to it. If you ask us to delete an enquiry sooner, we will.

Your rights

You may object at any time to processing based on our legitimate interests, and you may ask us to erase your personal data. You may also ask for access to or a copy of it, correction, restriction or portability where applicable. Email admin@urbanbite.menu and we will action it. You may complain to us and to the UK Information Commissioner’s Office at ico.org.uk. These rights may be limited where the law permits.