Last updated: 21/02/2024

Wild Sprout Kitchen (“we”, “us”, or “our”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant privacy legislation. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our website, order our products, or contact us.

1. Who We Are

Wild Sprout Kitchen Limited
Registered in England & Wales.
Email: hello@wildsproutkitchen.com

2. What Data We Collect

We may collect and process the following types of personal data: contact details such as your name, email address, phone number, nursery or home address; order information including delivery details, purchase history, and dietary requirements or allergies (if provided for meal orders); account details such as usernames, passwords (encrypted), and profile preferences; marketing preferences including your consent to receive updates or newsletters; technical information such as IP address, device type, browser, and usage data collected via cookies and analytics; and any other information you choose to provide, for example in emails, contact forms, or feedback.

3. How We Collect Your Data

We collect data when you complete forms on our website, such as contact, registration, or order forms; when you register as a nursery client or place an order; when you contact us by email, phone, or post; and when you interact with our website, including through cookies and analytics.

4. How We Use Your Data

We use your data to respond to your enquiries and provide customer support; to process and fulfil orders, arrange deliveries, and communicate order status; to register nurseries and manage business accounts; to send important updates or administrative messages; to provide marketing communications if you have opted in; to improve our website and services using analytics and user feedback; and to comply with our legal obligations, for example food safety records and accounting.

5. Legal Basis for Processing

We process your data under one or more of the following legal bases: contract, for processing your orders or nursery registration and delivering our services; consent, for marketing communications which you may withdraw at any time; legal obligation, to comply with laws and regulations; and legitimate interests, for running and improving our business, responding to your requests, and website analytics.

6. Who We Share Your Data With

We may share your data with trusted third parties for the purposes described above, including payment processors such as Shopify, Stripe, or PayPal; delivery partners and couriers; IT and web service providers for hosting, email, or analytics; professional advisers including accountants, legal, or compliance; and only as required by law, for example to HMRC or regulators. We require all third parties to respect the security of your data and to treat it in accordance with the law. We do not sell your personal data to anyone.

7. International Transfers

Some of our third-party providers, such as Shopify or email services, may store data outside the UK or EEA. We ensure that appropriate safeguards are in place, such as standard contractual clauses, to protect your data in accordance with the UK GDPR.

8. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes it was collected for, including satisfying legal, accounting, or reporting requirements. Orders and accounts are retained for up to 7 years in accordance with accounting and food safety law. Marketing data is retained until you unsubscribe or withdraw consent. Enquiries are typically deleted within 12 months unless required for ongoing support.

9. Your Data Protection Rights

Under the UK GDPR, you have the right to request access to your personal data; to request correction or deletion of your data; to object to or restrict processing of your data; to withdraw consent where we rely on it, for example for marketing; to request data portability; and to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data. To exercise any of these rights, please contact us at hello@wildsproutkitchen.com.

10. Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance your experience, analyse site traffic, and support core functionality. Some cookies are essential for site operation, for example for ordering. Others are used for analytics, such as Google Analytics, to help us understand usage and improve our site. By using our site, you consent to our use of cookies as explained in our Cookie Policy. You can manage cookie preferences in your browser settings.

11. Security

We take appropriate technical and organisational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, or alteration. All payment data is processed securely via third-party payment processors such as Shopify or PayPal; we do not store card details.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and are effective immediately.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we process your data, please contact us by email at hello@wildsproutkitchen.com

Wild Sprout Kitchen Ltd is registered with the Information Commissioner’s Office (ICO).