Legal
Privacy Policy
How we collect, use, and protect your personal data in compliance with UK GDPR.
Last updated: 03/09/2026
1. Data We Collect
We collect the following personal data when you place an order or create an account:
- Name, email address, phone number
- Delivery address
- Order history and payment information (processed via Stripe)
- Delivery slot preferences
- Subscription preferences (if applicable)
2. Lawful Basis
Our lawful basis for processing your personal data is:
- Contract — to fulfil your orders and deliver your purchases
- Legal obligation — to retain financial records for tax/accounting purposes
- Legitimate interests — to send delivery notifications and improve our service
- Consent — for marketing communications (you can opt out at any time)
3. Your Rights (UK GDPR)
You have the following rights regarding your personal data:
- Right of access — request a copy of your data
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data
- Right to data portability — receive your data in machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — for consent-based processing
To exercise any of these rights, contact us at privacy@thebutcherstable.uk.
4. Data Retention
We retain order records for 7 years for tax and accounting purposes. Personal data in order records is anonymized upon account deletion, but financial records are retained as required by law.
5. Cookies
We use cookieless analytics (Umami) that does not require consent under PECR. Any non-essential cookies are gated behind our cookie consent banner. See our Cookie Policy for details.
6. Third Parties
We share data with the following third parties for order fulfilment:
- Stripe — payment processing (PCI-DSS compliant)
- TextBee — SMS delivery notifications
- Resend — transactional email delivery
7. Contact
For privacy enquiries, contact privacy@thebutcherstable.uk.