Privacy policy

Our details

Address:
60 High St, St. Neots PE19 1JG

What personal data we collect

We may collect and process:

• Identity and contact data — name, email address, phone number, delivery and billing addresses
• Account data — username, password (stored securely), preferences
• Transaction data — order details, payment references (card details are handled by our payment providers, not stored on our servers in full)
• Technical and usage data — IP address, browser type, device information, pages viewed, and similar analytics where you consent or we have a lawful basis
• Marketing preferences — what you have agreed to receive
• Communications — messages you send to customer services

How we use your data and lawful bases

We use personal data only where we have a lawful basis under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These include:

• Contract — to take steps before a contract, perform our contract with you (process orders, deliver goods, take payment), and provide support
• Legal obligation — to comply with accounting, tax, or regulatory requirements
• Legitimate interests — to secure our site, prevent fraud, improve our services, and analyse use of the website, where those interests are not overridden by your rights
• Consent — where required for certain cookies, marketing emails, or other processing we specifically ask you to agree to (you may withdraw consent at any time)

Marketing

We will only send promotional emails or texts where the law allows and, where consent is required, you have opted in. You can opt out at any time using the link in our emails or by contacting us.

Who we share data with

We may share personal data with:

• Payment processors and fraud-prevention providers
• Delivery and logistics partners
• IT hosting, email, and analytics providers who process data on our instructions
• Professional advisers where required
• Authorities when we are legally required to do so

We do not sell your personal data. Processors are bound by contract to protect your information and use it only for the services they provide to us.

International transfers

Some of our service providers may process data outside the UK. Where we transfer personal data to countries that do not have an adequacy decision, we use appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or other mechanisms approved under UK law.

How long we keep data

We retain personal data only as long as needed for the purposes above, including to meet legal, accounting, or reporting requirements. Order and tax records are typically kept for the period required by HMRC and company law; marketing data is kept until you withdraw consent or we refresh our lists.

Security

We implement appropriate technical and organisational measures to protect personal data. No online transmission or storage is completely secure; we encourage you to use strong passwords and protect your account.

Cookies and similar technologies

We use cookies and similar technologies as described in our cookie controls or banner where shown. Essential cookies are needed for the site to function; others may require your consent under UK rules. You can adjust browser settings to block cookies, though parts of the site may not work as intended.

Your rights

Under UK data protection law you may have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request erasure in certain circumstances
• Request restriction of processing
• Object to processing based on legitimate interests or for direct marketing
• Data portability for data you provided where processing is automated and based on consent or contract
• Withdraw consent where processing is consent-based
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, contact us using the details below. We may need to verify your identity. You also have the right to complain to the ICO: ico.org.uk/make-a-complaint.

Children

Our services are not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe we have done so, please contact us and we will delete the information where appropriate.

Changes to this policy

We may update this policy to reflect changes in our practices or the law. We will post the updated version on this page and change the “Last updated” date. Where changes are material and we are required to notify you, we will do so by email or a notice on the site.

Contact us

For privacy questions or to exercise your rights: