Privacy Policy (Waterhouse Fayre)

Last updated: 23rd January 2026

This Privacy Policy explains how Waterhouse Fayre Ltd (“we”, “us”, “our”) collects, uses, shares and protects personal data when you visit or shop on waterhousefayre.co.uk.

1) Who we are (Data Controller)

Waterhouse Fayre Ltd
Higher Elms, Burlescombe, Tiverton, Devon, EX16 7LE, United Kingdom
Email: info@waterhousefayre.co.uk
Telephone: 01884 842640
Company number: 09497293

2) What personal data we collect

A) Information you give us

  • Orders and checkout: name, billing/delivery address, email, phone number, items ordered, delivery notes, and order history.

  • Account (if you create one): name, email/username, password (stored in encrypted/hashed form), order history, saved addresses.

  • Contacting us: name, email address, phone number (if provided), and the content of your enquiry.

B) Information collected automatically

  • Technical and usage data: IP address, browser type/version, device information, operating system, pages visited, and the date/time of visits.

  • Cookies and similar technologies: used for core site functions (like basket/checkout), and for analytics (Google Analytics).

3) How we use your data and our lawful bases

We only process personal data where the law allows.

  • To process and deliver your order (including customer service)
    Lawful basis: Contract (to fulfil your purchase) and Legal obligation (records for tax/accounting).

  • To manage your account (if you create one)
    Lawful basis: Contract.

  • To respond to enquiries
    Lawful basis: Legitimate interests (running our business and supporting customers) and/or Contract (if related to an order).

  • To operate, secure and improve our website (including analytics and troubleshooting)
    Lawful basis: Legitimate interests, and/or Consent where required for analytics cookies (see section 4).

4) Cookies and Google Analytics

We use cookies to make the website work properly (for example, remembering your basket and enabling checkout).

We also use Google Analytics to understand how visitors use our website (for example, which pages are visited, how long people stay, and how they found us). This helps us improve the site.

  • Where required, analytics cookies are only used with your consent (for example via a cookie banner).

  • You can also control cookies through your browser settings (including deleting or blocking cookies).

  • You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on (available from Google).

Note: Blocking essential cookies may affect basket/checkout and account features.

5) Payments (Stripe)

Payments are processed securely by Stripe. When you pay, Stripe processes your payment information (such as card details) on their systems.

  • We do not store full card numbers or security codes.

  • We receive confirmation of payment and transaction details needed for order processing and accounting.

6) Who we share your data with

We share personal data only when necessary, including with:

  • Stripe (payment processing).

  • Delivery / postal partners (to deliver your order).

  • Google (Google Analytics — usage/technical data via cookies where enabled).

  • Website hosting / IT providers (to operate and maintain the website).

  • Professional advisers (accountants, insurers, legal advisers) where needed.

  • Authorities where required by law.

We require third parties to protect your data and use it only for the services they provide to us.

7) International transfers

Some providers we use (such as Stripe and Google) may process personal data outside the UK. Where this happens, we use appropriate safeguards to protect your data, such as UK adequacy arrangements and/or approved contractual protections (for example, standard contractual clauses / the UK addendum), depending on the provider and circumstances.

8) How long we keep your data

We keep personal data only as long as necessary:

  • Order and transaction records: typically 6 years to meet tax/accounting obligations.

  • Enquiries: usually up to 24 months after the last contact (unless needed longer for a dispute).

  • Accounts: until you delete your account or it becomes inactive for a prolonged period (we may contact you before deletion).

  • Google Analytics data: retained for the period set in our Analytics settings and then deleted or anonymised.

9) No marketing

We do not send marketing emails or newsletters.
We may contact you only for transactional or service reasons, such as:

  • order confirmations and delivery updates,

  • responding to enquiries,

  • important notices about your account or order.

10) Security

We use appropriate technical and organisational measures to protect personal data (for example, access controls and secure systems). While no online service can guarantee absolute security, we work to protect your information.

11) Your rights

Under UK GDPR, you may have the right to:

  • access your personal data,

  • correct inaccurate data,

  • request deletion (in some cases),

  • restrict or object to processing (in some cases),

  • data portability (in some cases),

  • withdraw consent (where processing is based on consent, e.g., certain cookies).

To exercise your rights, email info@waterhousefayre.co.uk. We may need to verify your identity.

12) Children

Our website is not intended for children, and we do not knowingly collect data from children.

13) Third-party links

Our website may include links to third-party websites. We are not responsible for their privacy practices. Please review their policies separately.

14) Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date will show when changes were made.

15) Complaints

If you’re unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO).