Privacy Policy

Privacy Policy

Last updated: 12 August 2026

This Privacy Policy explains how I collect, use, store and protect your personal information when you visit my website, purchase products, book a workshop, or contact me.

I am a sole trader based in the United Kingdom and operate this website using Shopify. For the purposes of UK data protection law, I am responsible for the personal information I collect and use through this website.

Personal Information I Collect

Depending on how you use my website, I may collect the following personal information:

  • your name;
  • email address;
  • telephone number, where you provide it;
  • billing address;
  • delivery address;
  • details of products purchased or workshops booked;
  • information relating to your orders, bookings, returns, refunds and enquiries;
  • payment and transaction information; and
  • technical information about your device and use of the website, such as your IP address, browser type, device information and information about how you interact with the website.

I do not normally have access to or store your full payment card details. Payments are processed through Shopify and/or the payment provider selected at checkout.

I only collect personal information that is reasonably necessary for the purposes described in this Privacy Policy.

How I Collect Personal Information

I may collect personal information when you:

  • visit or use my website;
  • place an order;
  • book or purchase a workshop;
  • contact me by email or through the website;
  • provide information in connection with an order, booking, return, refund or complaint; or
  • interact with cookies and similar technologies used on the website.

How I Use Your Personal Information

I may use your personal information to:

  • process and fulfil orders;
  • process workshop bookings;
  • arrange delivery;
  • process payments;
  • provide order confirmations, invoices and other information relating to your purchase;
  • communicate with you about your order or booking;
  • deal with returns, refunds and cancellations;
  • respond to enquiries and complaints;
  • provide customer service;
  • maintain appropriate business, accounting and tax records;
  • prevent and investigate fraud, misuse or security issues;
  • operate, maintain and improve my website and services;
  • comply with legal and regulatory requirements; and
  • establish, exercise or defend legal claims where necessary.

Where you have provided the appropriate consent, I may also use your contact details to send you marketing communications about products, workshops or other services.

You can unsubscribe from marketing communications at any time.

Lawful Basis for Processing

UK data protection law requires me to have a lawful basis for processing personal information. Depending on the circumstances, I rely on the following lawful bases:

Contract

I may process your personal information where this is necessary to enter into or perform a contract with you, such as processing an order or workshop booking, arranging delivery or communicating with you about your purchase.

Legal Obligation

I may process and retain personal information where this is necessary to comply with legal, accounting, tax or other legal requirements.

Legitimate Interests

I may process personal information where this is necessary for the legitimate operation, administration, security and improvement of my business, including responding to enquiries, preventing fraud and protecting my legal rights.

Where I rely on legitimate interests, I consider whether my interests are appropriately balanced against your rights and interests.

Consent

Where consent is required by law, I will ask for your consent before processing your personal information for that purpose.

Where I rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Cookies and Similar Technologies

My website uses cookies and similar technologies.

Some cookies are necessary for the website to operate. These may include technologies required to:

  • operate the shopping basket and checkout;
  • process orders and payments;
  • maintain website security; and
  • provide essential website functionality.

Other cookies or similar technologies may be used for optional purposes. Where consent is required, I will obtain your consent before using them.

My website is operated using Shopify, which uses cookies and similar technologies to provide and secure the online store, shopping basket and checkout and to support the operation of the website.

I use Consentmo to help manage cookie consent and privacy choices on my website.

I do not use Google Analytics.

I do not currently use the Facebook or Instagram Shopify sales channel or a Meta advertising pixel through Shopify.

The cookie consent mechanism allows visitors to make choices about optional cookies. I will provide a means for visitors to review and change their cookie choices.

The use of cookies and similar technologies is governed by the Privacy and Electronic Communications Regulations (PECR), as well as UK data protection law where the information involved constitutes personal data. The ICO's current guidance covers cookies as well as technologies such as tracking pixels, scripts, tags and web storage.

Sharing Personal Information

I may share personal information with third parties where this is necessary to provide my services, operate my business, process transactions, or comply with legal obligations.

These third parties may include:

Shopify

I use Shopify to operate my online store and provide ecommerce, checkout and related services. 

Shopify processes personal information as necessary to provide the services used by my store, including website functionality, checkout, payment processing, security and order management.

Shopify may also use information from my store together with information from Shopify and other Shopify merchants to provide and improve certain Shopify services, including analytics, advertising and personalisation, in accordance with Shopify's terms and privacy policy.

Payment providers

Payment information is processed by the payment provider available at checkout. I do not normally have access to your full payment card details.

Delivery providers

Where you purchase a physical product, I may provide your name and delivery address to the postal or delivery service required to fulfil your order.

Business and technology service providers

I may use third-party providers where necessary to operate my website or business, such as email, IT, accounting or other business-support services.

Legal and regulatory authorities

I may disclose personal information where required by law, regulation or legal process, or where necessary to establish, exercise or defend legal rights or prevent or investigate fraud or other unlawful activity.

I do not sell your personal information.

International Transfers

Some of the service providers I use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, I will take appropriate steps to ensure that the transfer complies with applicable UK data protection law and that appropriate safeguards are in place where required.

Data Retention

I retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time information is retained depends on the type of information and the reason it was collected.

For example, I may need to retain information relating to purchases, payments and business transactions for accounting, tax and legal purposes.

Information relating to enquiries, customer service matters and complaints may also be retained for as long as reasonably necessary to deal with the matter and maintain appropriate business records.

When personal information is no longer required, I will securely delete it or otherwise dispose of it appropriately.

Your Data Protection Rights

Under UK data protection law, you may have the following rights, depending on the circumstances:

  • the right to be informed about how your personal information is used;
  • the right to request access to the personal information I hold about you;
  • the right to request correction of inaccurate or incomplete information;
  • the right to request erasure of your personal information in certain circumstances;
  • the right to request restriction of processing in certain circumstances;
  • the right to object to certain processing;
  • the right to withdraw consent where processing is based on consent; and
  • the right to data portability in certain circumstances.

These rights are subject to certain legal conditions and exemptions.

Making a Data Protection Request

If you wish to exercise any of your data protection rights, you can contact me directly using the contact details at the end of this Privacy Policy.

You do not need to use a particular form or wording.

I may need to request reasonable information to confirm your identity before responding to a request.

I will deal with requests within the applicable legal time limits.

Data Protection Complaints

If you have a concern or complaint about how I have handled your personal information, please contact me using the details below.

You do not need to use a particular form or wording.

I will:

  • acknowledge your data protection complaint within 30 days;
  • take appropriate steps to investigate the complaint without undue delay;
  • keep you informed of progress where appropriate; and
  • communicate the outcome of the complaint without undue delay.

If you are not satisfied with my response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

The requirement for organisations to have a data protection complaints process came into force on 19 June 2026 and applies to organisations of all sizes.

Direct Marketing

Where I send marketing communications by email or other electronic means, I will comply with applicable UK direct-marketing and electronic communications requirements.

Where consent is required, I will obtain consent before sending marketing communications.

Where applicable, you can unsubscribe from marketing communications at any time by using the unsubscribe option provided or by contacting me directly.

UK PECR generally requires consent for unsolicited electronic marketing to individual subscribers, subject to specific exceptions.

Security of Personal Information

I take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

I also take reasonable steps to ensure that third-party service providers processing personal information on my behalf handle that information appropriately.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Personal Data Breaches

If I become aware of a personal data breach, I will assess the nature and potential impact of the breach and take appropriate steps to contain and investigate it.

Where required by UK data protection law, I will notify the Information Commissioner's Office and/or affected individuals.

Children's Privacy

This website is not knowingly intended to collect personal information from children.

If I become aware that I have collected personal information from a child in circumstances where this was not appropriate or lawful, I will take reasonable steps to address the situation.

Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, the services I provide, technology, or applicable legal and regulatory requirements.

The latest version of this Privacy Policy will always be available on this website.

Last updated: 12 August 2026

Contact

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or wish to make a data protection complaint, please contact me:

Caitlin Walsh / Delea Fermented Foods
Email: deleafermentedfoods@gmail.com
Address: Windsor Place, Liskeard PL14 4BH