PRIVACY

Our Privacy Policy

Effective date: 10 August 2025 — Version 1.0

This Privacy Policy explains how Arbourne’s Country Kitchen LTD (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you visit our website, contact us, place enquiries, request quotes, or otherwise interact with us. We are committed to protecting your privacy and processing your personal data in a lawful, fair and transparent way.

Contact details

Arbourne’s Country Kitchen LTD
Unit 5, Ladygrove Business Park
Gloucester Road
Mitcheldean
Gloucestershire
GL17 0DS
United Kingdom

Phone: +44 7811 179 504
Email: info@arbournescountrykitchen.co.uk

1. The personal data we collect

We may collect and process the following personal data about you depending on how you interact with us:

• Contact information: name, company name, job title, business address, email address, telephone numbers.
• Transactional information: order details, invoices, delivery addresses, payment references when relevant.
• Enquiry data: messages and attachments you send via our contact forms, email or phone notes.
• Website & cookies: IP address, browser type, device information, pages visited and other analytics data collected through cookies and similar technologies.
• Marketing preferences: whether you have agreed to receive marketing communications from us.
• Other: any additional information you provide to us (for example specification requirements, allergen requests or bespoke order details).

2. How we collect data

• Directly from you: when you fill in enquiry forms, email or call us, place orders, request product specification sheets, or subscribe to communications.
• Automatically: through cookies and web analytics when you visit our site.
• From third parties: for example, business contact details provided by customers, trade directories, or payment processors when you complete a purchase (where applicable).

3. Purposes and lawful bases for processing

We will only process personal data where we have a lawful basis to do so. Typical purposes and bases include:

• To respond to enquiries and supply goods/services — performance of a contract or taking steps before entering into a contract.
• To process orders and payments — performance of a contract and to comply with legal obligations (e.g., VAT records).
• To communicate with customers and prospects — legitimate interests (running our business, answering queries, providing customer support) and, where required, consent for direct marketing emails.
• To comply with legal and regulatory obligations — such as food safety audits and record-keeping required by UK authorities.
• To improve our website and services — legitimate interests (analytics and user experience improvements).

4. Cookies and similar technologies

We use cookies on our website to improve your browsing experience, to provide basic site functionality, and to measure site performance. Cookies are small text files stored on your device.

You can manage and disable cookies via your browser settings. Disabling analytics cookies may reduce our ability to improve the site. If we use any third-party advertising cookies we will ask for consent where legally required.

5. Sharing personal data

Where necessary and appropriate we share personal data with:

• Service providers and processors who help us operate the website and run the business (payment processors, delivery partners, accountants, CRM/email platforms, hosting providers).
• Our customers or distributors — for example when fulfilling an order or processing a delivery you have authorised.
• Legal and regulatory bodies when required by law (tax authorities, law enforcement, or food-safety auditors).
• Third parties only with your consent where required.

Important: We remain responsible for the security of personal data we share with processors. If you want a specific list of service providers (e.g., payment gateway, CRM, analytics providers), ask us and we will provide it.

6. International transfers

We generally store and process personal data within the UK and the EEA. If we or our processors transfer data outside the UK or EEA, we will ensure appropriate safeguards are in place (e.g. UK adequacy, standard contractual clauses). If you want details about these safeguards, please contact us.

7. Data retention

We retain personal data only as long as necessary for the purposes for which it was collected, including to comply with legal, tax and accounting obligations. Typical retention periods:

• Order and transactional records: minimum 6 years (to meet tax and accounting requirements).
• Marketing consent and preferences: until you withdraw consent or for up to 3 years after last contact.
• Website analytics: up to 24 months.
• Enquiry messages: retained while needed to resolve your request — usually up to 2 years unless longer retention is justified.

8. Your rights

Under the UK GDPR you have rights in relation to your personal data. These include:

• The right to access the personal data we hold about you (subject access request).
• The right to request correction of inaccurate personal data.
• The right to request erasure (the right to be forgotten) in limited circumstances.
• The right to restrict or object to processing in certain situations, including direct marketing.
• The right to data portability (where processing is based on consent or contract and the data is processed electronically).
• The right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact us at info@arbournescountrykitchen.co.uk or by post at the address above. We will respond within one month of receiving your request unless the request is complex (we may extend by a further two months and will inform you of this).

9. Marketing communications

We will only send marketing emails where you have given consent (or where we have another lawful basis). Every marketing email contains an easy way to unsubscribe. If you wish to opt-out of marketing at any time, follow the unsubscribe link or contact us.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. Measures include:

• Secure servers and encrypted connections (HTTPS)
• Access controls and least-privilege principles for staff
• Regular backups and software updates
• Vendor assessments for third-party processors

However, no method of transmission over the internet or electronic storage is 100% secure. If you believe your personal data has been compromised, contact us immediately.

11. Children

Our website is intended for business use. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected information from a child, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top will be revised each time we make a material change. We recommend checking this page occasionally to stay informed of any updates.

13. Complaints and supervisory authority

If you believe we have not complied with data protection law you may complain to us first using the contact details above. You also have the right to lodge a complaint with the UK Information Commissioner’s Office:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

14. Contact us

If you have any questions about this policy, the personal data we hold, or want to exercise your rights, please contact:

Arbourne’s Country Kitchen LTD
Email: info@arbournescountrykitchen.co.uk
Phone: +44 7811 179 504
Address: Unit 5, Ladygrove Business Park, Gloucester Road, Mitcheldean, Gloucestershire, GL17 0DS