Last reviewed: 2 October 2026
FANTASYFOODCENTRAL LIMITED trading as O Genki Bristol
Company No. 16318128 · Registered in England and Wales
Registered office: Unit 36, Meriton Street, Bristol, England, BS2 0SZ
Trading / collection address: Unit 25, Meriton Foundry, Meriton Street, Bristol, England, BS2 0SZ
Email: ogenkicentral@gmail.com · Tel: 07577 506507
For direct O Genki website orders, FANTASYFOODCENTRAL LIMITED is the controller. This notice covers the direct-order website and related order administration. Square has its own privacy information for processing on its hosted payment service.
Most order information comes directly from you when you use the website or contact O Genki. Payment status/identifiers are received through the payment process. For a direct collection order we collect the information reasonably needed to fulfil it: customer name, mobile number, email address, selected items/options, collection slot, any voluntary order note, a neutral record that the allergen-information step was completed, legal/terms/privacy version evidence, and payment/transaction identifiers. Where a complaint, refund or other aftercare matter is raised, we may also record a customer-service case, factual notes about the issue, resolution steps and verified Square refund identifiers/status. We do not ask the customer-facing checkout for a delivery address. O Genki does not collect or store the full card number, CVV/CVC, Apple Pay credential or Google Pay credential. Card and wallet entry takes place only on Square's hosted payment service. The website also records limited aggregate usage counts for improving the menu and ordering flow; the metrics store daily totals rather than a persistent visitor profile.
We use order information to create and administer the order, arrange collection, communicate about fulfilment, verify payment, send the contract/order confirmation, prevent duplicate or fraudulent transactions, handle refunds, complaints and disputes, and keep records where law requires it. Contract is the principal basis for order fulfilment. Legal obligation may apply to tax/accounting records. Legitimate interests may apply to proportionate security, fraud prevention, service improvement and the establishment, exercise or defence of legal claims, subject to individual rights. O Genki’s first-party website measurement is designed to retain only aggregate statistical results for improving the service; where storage/access rules apply, the statistical-purposes requirements and visitor objection control described in the Cookie & Storage Technology Policy are used.
The checkout records only the neutral fact that the allergen-information step was completed. It does not retain whether a customer personally needed allergen information or which health-related reason may have prompted the review. The general order-note field is not an allergy or medical-information channel and the checkout blocks obvious allergy/medical wording before an order is recorded. Where a customer voluntarily gives health information in another channel, staff must handle it only to the extent needed to respond safely and lawfully.
Direct ordering may use Square for hosted payment, Netlify for hosting/server functions, Supabase for the order database and the configured transactional email provider for order messages. O Genki deliberately minimises the data sent to Square: the checkout request uses the payment amount and an O Genki order reference and does not pre-populate the customer's phone number, email address, free-text order note, collection slot or food-item list into the Square payment-link request. Square will still process the payment information the customer enters or supplies through a supported wallet on Square's hosted service. Relevant information may also be disclosed to professional advisers, insurers, payment/dispute handlers, public authorities or regulators where there is a lawful reason. O Genki does not sell customer personal information.
Some providers may process information outside the UK. Where a restricted transfer is made for personal information for which O Genki is responsible, an applicable UK transfer mechanism, adequacy route or other lawful safeguard must be used. Contact us if you want more information about relevant safeguards.
We do not keep identifiable customer information indefinitely. O Genki uses a documented retention schedule and the ordering system is designed to remove free-text order notes and later scrub customer contact details after the approved operational periods. Core financial and transaction records may need to be kept longer for company, tax, accounting, dispute and legal-claim purposes. Complaint/refund case records may be placed on a retention hold while the issue, chargeback, regulatory matter or legal claim remains open; unnecessary sensitive information should not be recorded in those case notes. The exact live retention periods must match the approved internal schedule and the configured production system before live ordering is enabled.
Where information is no longer needed, it is deleted, anonymised or securely disposed of as appropriate. Provider-side retention (for example payment, hosting or transactional-email logs) is separately reviewed and configured where the provider permits.
Supplying an email address or phone number for an order does not opt you into unrelated direct marketing. This checkout does not add direct-order customers to a marketing list.
O Genki uses privacy-minimised first-party aggregate usage measurement to improve its own website and ordering flow. It stores daily aggregate counts rather than raw visitor-event histories and does not use a persistent visitor identifier, Google Analytics, Meta Pixel, retargeting or cross-site advertising profiles. A visitor can object using the control in the Cookie & Storage Technology Policy; if they do, a first-party og_stats=off preference cookie is stored only to remember that choice. The customer ordering flow does not intentionally use localStorage or sessionStorage. Staff kitchen and manager areas use separate secure authentication cookies. Square's hosted checkout is a separate service. See the Cookie & Storage Technology Policy.
Depending on the processing and lawful basis, rights may include access, rectification, erasure, restriction, data portability and objection. Where consent is actually used as a lawful basis, it can be withdrawn. Conditions and exemptions may apply. Contact ogenkicentral@gmail.com; reasonable identity verification may be required.
The direct-order flow does not use solely automated decision-making that produces legal or similarly significant effects on customers.
Please contact O Genki first if you have a privacy concern. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data-protection regulator.
We use proportionate organisational and technical measures, including server-side price/payment verification, a signed payment-return verification token, restricted database access, limited kitchen-device data fields and security controls. Kitchen endpoints do not receive customer email addresses or phone numbers because those details are not needed to prepare or pack food. No internet service can guarantee absolute security. We review this notice when our providers, processing or legal requirements materially change.
The company must separately complete and keep evidence of the ICO fee self-assessment and pay the fee if required. That assessment is an internal compliance task and is not replaced by this privacy notice.
Legal & Ordering Information · Ordering Terms · Allergen Information · Privacy · Cookies