Privacy Policy

Who we are

This policy explains how LastingFlavour (“we”, “us”, “our”) collects and uses your personal data when you visit lastingflavour.co.uk, place an order or contact us. We are the “controller” of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018), which means we decide how and why it is used.

LastingFlavour, 2 Frederick Street, London, WC1X 0ND, United Kingdom.
Email: lastingflavourshop@gmail.com

What personal data we collect and why

  • Orders and payments. When you place an order we collect your name, email address, phone number (if you give one), billing and delivery addresses, the items you order and your chosen delivery option. We use this to take payment, prepare and deliver your order, send order confirmations and updates, give refunds and sort out any problems. Our lawful basis is performing our contract with you. We also keep order records to meet our tax and accounting duties (a legal obligation).
  • Card and payment details. Payments are processed by our payment provider, WooPayments (powered by Stripe). Your card details are entered into the payment provider’s secure form and go directly to them. We never see or store your full card number.
  • Your account (optional). If you create an account, we store your name, email address, an encrypted password, saved addresses and order history so you can check out faster and view past orders. Our lawful basis is performing our contract with you.
  • Enquiries. If you email us or message us on social media, we use your name, contact details and the content of your message to reply. Our lawful basis is our legitimate interest in answering enquiries and, where you are asking about an order, taking steps at your request before a contract.
  • Product reviews. If you leave a review, we publish the review and the name you enter. We do not publish your email address. Our lawful basis is our legitimate interest in showing genuine customer feedback.
  • Technical data and cookies. When you visit our website, we and the services described below automatically receive technical data such as your IP address, browser type, device and the pages you view. Essential cookies keep your basket and checkout working. See our Cookie Policy for details. Our lawful basis is our legitimate interest in keeping the website secure and working, and your consent for any cookies that are not essential.

Marketing

We do not currently send marketing emails. If we start to, we will only do so with your consent (or where the law otherwise allows for existing customers), and every email will include a simple way to unsubscribe.

Who we share your data with

We only share personal data with organisations that help us run the shop, and only the information they need. We do not sell your personal data.

  • Payment providers. WooPayments, which uses Stripe, processes card and wallet payments and carries out fraud checks. WooPayments is provided through Automattic Inc., which also handles order and payment information to run the service. If you choose to pay with Klarna or Clearpay, those companies receive your order details and use them under their own privacy policies.
  • Delivery companies. Couriers and postal services receive your name, delivery address and, where needed, your phone number or email address so they can deliver your order.
  • Website and technology providers. Our hosting provider stores the website and its data on our behalf, and our email provider (Gmail, from Google) handles the messages we exchange with you.
  • Professional advisers. Accountants and similar advisers, where they need the information to keep our accounts and meet our legal duties.
  • Authorities. Anyone we are legally required to share information with, such as HMRC or the police.

Third-party content on our website

  • Google Fonts. Our website loads its typefaces from Google Fonts. When a page loads, your browser connects to Google’s servers, which receive your IP address.
  • Instagram. Our homepage shows posts from our Instagram account. That content is loaded from Instagram (Meta Platforms), which may receive your IP address and set its own cookies.
  • Stripe. Our payment provider’s scripts load on our pages to process payments securely and detect fraud, and may collect information about your device and browser.
  • Links to other websites. Our site links to Instagram, Facebook and Etsy. Once you leave our website, those sites’ own privacy policies apply.

Transfers outside the UK

Some of the organisations above, such as Stripe, Automattic, Google and Meta, are based in or use servers in the United States and other countries outside the UK. Where this happens, we make sure your data has an appropriate safeguard, for example the UK’s adequacy arrangements (including the UK–US data bridge for certified companies) or the UK International Data Transfer Agreement or Addendum.

How long we keep your data

  • Order and accounting records: for at least 6 years, as tax law requires.
  • Account details: until you ask us to delete your account. We will still keep the order records described above.
  • Enquiries: for up to 2 years after our last contact with you.
  • Product reviews: for as long as the review is published. You can ask us to remove it at any time.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct anything that is inaccurate or incomplete;
  • ask us to delete your personal data, where there is no good reason for us to keep it;
  • ask us to restrict how we use your data, or object to us using it where we rely on our legitimate interests;
  • ask for your data in a portable format, where you gave it to us and we use it to carry out a contract with you;
  • withdraw your consent at any time, where we rely on your consent.

We do not make decisions about you using automated processing that has legal or similarly significant effects.

To use any of these rights, email us at lastingflavourshop@gmail.com. There is no charge, and we will normally reply within one month. We may need to check your identity first. Some rights have exceptions. For example, we cannot delete order records we are legally required to keep.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

We use cookies to keep your basket and checkout working. For the full list and how to manage them, see our Cookie Policy.

Keeping your data secure

Our website uses HTTPS encryption, payments are handled by regulated payment providers, and access to customer information is limited to the people who need it. No method of sending or storing data is completely secure, but we take reasonable steps to protect yours.

Children

Our website is for adults buying gifts and treats. It is not aimed at children under 13, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time, for example if we add a new service or the law changes. The date at the top of this page shows when it was last updated.

Contact us

If you have any questions about this policy or how we use your data, email us at lastingflavourshop@gmail.com.