Privacy Policy
Last updated: 14 October 2026
This policy explains what personal data Evergreen Foods ("we", "us") collects when you use evergreenfoods.co.uk, why we collect it, who we share it with and the rights you have over it. We are the data controller for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are and how to contact us
Evergreen Foods, Milton Keynes, United Kingdom.
Website: evergreenfoods.co.uk
Email: info@evergreenfoods.co.uk
Telephone: 01908 236455
If you have any question about this policy or your data, please contact us using the details above.
2. What personal data we collect
2.1 Information you give us
- Order details: your name, email address, telephone number, delivery address and postcode, the items you order, any cutting or preparation instructions and any notes you add to your order.
- Account details: if you create an account, your name, email address, telephone number, saved addresses and a password. Your password is stored in an encrypted (hashed) form and we cannot read it.
- Messages: anything you send us through the contact form, by email or by phone.
- Marketing choices: whether you have signed up to our newsletter or offers.
2.2 Information collected automatically
- Your IP address when you place an order, sign in or send a message. We use this to prevent fraud and to protect accounts from repeated failed sign in attempts.
- Your order history, saved favourites and the stock alerts you ask for, so that we can show them in your account.
2.3 Payment details
Card payments are processed by Stripe. Your card details are entered on Stripe's secure payment page and go straight to Stripe. We never see or store your full card number.
3. How and why we use your data
We only use your personal data where the law allows us to. The table below sets out each purpose and its legal basis.
| What we use it for | Legal basis |
|---|---|
| Taking payment, preparing, delivering or arranging collection of your order, including passing your name, address and phone number to our delivery driver or courier | Performance of a contract with you |
| Sending order confirmations, status updates, refund notices and replies to your messages | Performance of a contract with you |
| Managing your account, saved addresses, favourites and back in stock alerts you request | Performance of a contract with you |
| Preventing fraud, securing our website and limiting repeated sign in attempts | Our legitimate interests in keeping our customers and business safe |
| Keeping order and payment records for tax and accounting | Legal obligation |
| Sending newsletters, offers and promotions | Your consent, which you can withdraw at any time |
We only send marketing emails if you have opted in. Every marketing email includes a way to unsubscribe, and you can also contact us to stop them. Order and service emails are not marketing and will still be sent while you have an active order.
We do not sell your personal data, and we do not make decisions about you based only on automated processing.
4. Cookies
Our website uses only cookies that are strictly necessary for it to work:
- a session cookie that keeps your basket and keeps you signed in while you browse; and
- a security cookie that protects our forms against misuse.
These cookies are deleted when you close your browser or sign out, and the law does not require your consent for them. We do not use advertising or tracking cookies. When you pay, Stripe may set its own cookies on its payment page to prevent fraud; these are covered by Stripe's privacy policy.
If we add analytics or other optional cookies in future, we will update this policy and ask for your consent first.
5. Who we share your data with
We only share your data with trusted service providers who help us run our business, and only as much as they need to do their job:
- Stripe, to process card payments and refunds.
- Our delivery drivers and courier partners (such as APC Overnight for nationwide orders), who receive your name, delivery address and telephone number to deliver your order.
- Our website hosting and email providers, who store our website data and send our emails on our behalf.
These providers act on our instructions and must keep your data secure. We do not share your data with other companies for their own marketing.
We may also disclose your data where we are required to by law, by a court or by a regulator, or where it is necessary to protect our rights or the safety of our customers.
6. International transfers
Some of our providers, such as Stripe, may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement approved by the Information Commissioner.
7. How long we keep your data
- Orders and payment records: six years from the end of the financial year in which the order was placed, as required for tax purposes.
- Your account: until you ask us to close it. Order records linked to it are kept for the period above.
- Contact form messages: up to two years.
- Marketing list: until you unsubscribe.
- Sign in security records: a short period only, then deleted automatically.
8. How we protect your data
Our whole website runs over an encrypted HTTPS connection. Passwords are stored in hashed form, access to our admin system is restricted to authorised staff with their own accounts, and card details are handled by Stripe, not by us. No method of sending data over the internet is completely secure, but we take appropriate technical and organisational steps to protect your information.
You can help by choosing a strong password, keeping it private and signing out when you use a shared computer.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to us using your data on the basis of our legitimate interests, and object to direct marketing at any time;
- ask us to send the data you gave us to you or to another organisation in a commonly used format; and
- withdraw your consent at any time, where we rely on consent.
Some rights have limits. For example, we must keep order records for tax purposes even if you ask us to delete your account. To use any of these rights, email info@evergreenfoods.co.uk. We will reply within one month and will not usually charge a fee.
10. Children
Our website is not intended for children under 16 and we do not knowingly collect their personal data.
11. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.