Privacy notice

Who we are

Sally Milden trading as Sally's Gluten Free Kitchen, 14 Grosvenor Close, Torquay, TQ2 7LB, England. Email theglutenfreelarder@outlook.com.

Sally Milden trading as Sally's Gluten Free Kitchen decides why customer information is used for this shop. There is no data protection officer. Privacy questions go to theglutenfreelarder@outlook.com.

This notice describes the shop as it works today. It is being reviewed before public launch, and it is not a professionally approved privacy notice.

What information we collect

Account: your name, email, an optional phone number, and the sign-in identifiers our account provider stores.

Order: the products, prices, collection day if it is a pre-order, the amount paid, a readable order reference, and the email used for the receipt. A guest can check out without an account.

Rewards and vouchers: the balance and movements on an account, and a voucher held by that account.

Email updates: the email address, whether you asked for updates, when that choice was recorded, and whether updates were later stopped or suppressed after a bounce or complaint.

Payment: Stripe receives the card payment and stores its own payment reference. We store Stripe's payment reference and the amount. We do not store the full card number.

The connection address may be used for a short time in memory to slow repeated lookups. It is not saved as part of your account. The companies that host the site may keep their own technical logs. How long they keep those logs is their own rule, and it has not been copied here as if it were ours.

Why we use it

To take an order, prepare it, and tell you about collection or a problem with that order.

To run your account, Larder Rewards, and any voucher already issued to that account.

To send optional email updates only if you asked for them.

To keep a record of an order or a payment where we need it for the transaction, accounting, or a legal duty. A number of years has not been chosen. See Retention.

Ordering and payments

Placing an order does not sign you up to email updates.

Card payments on this Preview are Stripe TEST payments. No live card is charged. Stripe is the payment company. We send it the amount, the order reference, and the channel (pre-order or pay at the larder). We do not send it your marketing choice.

Accounts, rewards and vouchers

An account is optional for a guest pre-order that uses an email for the receipt.

Larder Rewards are attached to a verified account. They are not a bank balance.

A launch voucher, where one is offered in Preview, is claimed on an account after an explicit email-updates choice. Stopping email updates later does not cancel a voucher that has already been issued. The voucher offer itself is not a certified promotion.

Marketing

Email updates are optional. The choice is unticked until you make it. Creating an account does not require it, and paying for an order does not add you.

If you join, we record that you asked, and you can unsubscribe. If an email bounces or you complain, we keep the address suppressed so we do not keep writing. Order and account messages can still be sent where they are needed for that order or account.

Service providers

Supabase stores the shop database and the sign-in accounts.

Vercel hosts this website.

Stripe takes the card payment.

Resend sends service email, such as account links and order messages, and any Preview test of an email update.

They receive the information needed for that job. They are not given a separate advertising audience from this site.

Retention

A fixed retention period has not been decided, so this notice does not invent one.

The criterion for now is: keep information while it is needed for the purpose it was collected, and longer where an order, payment, or legal duty requires it. Marketing suppression is kept so an opted-out address is not emailed again. Sally still has to confirm the actual periods before a public launch.

Cookies and storage

We use storage that is needed to run the basket, sign-in, this Preview gate, the order you just placed, and the payment you asked for. We do not use analytics or advertising trackers, so this Preview does not show a cookie-consent banner.

Sign-in session cookies (Cookie, set by Supabase Auth): Keep a customer or staff member signed in.

gfl_preview_access (Cookie): Remember that this unfinished Preview site was unlocked. It is not part of a public shop.

gfl_order_access (Cookie): Open the order that was just placed, or opened from the order email, on this browser.

gfl_return_session (Cookie, kept for 20 minutes): Let the payment return page check this browser's checkout without leaving the payment-company session id in the address.

gfl:basket:preorder (localStorage): Remember the pre-order basket on this device.

gfl:basket:shed (localStorage): Remember the pay-at-the-larder basket on this device.

Stripe embedded checkout (Stripe-controlled storage during payment): Take the card payment the customer asked for, and Stripe's own fraud checks for that payment. Not used by Sally's Gluten Free Kitchen for advertising.

Your rights

You can ask for a copy of your information, to correct it, to delete it, to restrict or object to some uses, and, where it applies, to move it. You can withdraw a marketing choice at any time. Withdrawing it does not undo an order already placed, and it does not cancel a voucher already issued.

Some records, especially orders and payments, may need to be kept even after a deletion request. We will say if that applies.

You can complain to the Information Commissioner's Office (ICO) at ico.org.uk. Contact us first at the email above if you want us to look at it.

Contact

Email theglutenfreelarder@outlook.com. Post: Sally Milden trading as Sally's Gluten Free Kitchen, 14 Grosvenor Close, Torquay, TQ2 7LB, England. Email theglutenfreelarder@outlook.com.