PRIVACY, COOKIE & COMPLAINTS POLICY

Last updated: June 2026

Who We Are

Northern Rye Bakery ("Northern Rye", "we", "us" or "our") is committed to protecting your privacy and handling your personal information responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 as amended, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations (PECR).

This Privacy & Cookie Policy explains what personal information we collect, how we use it, how we protect it and your rights in relation to that information.

Information We Collect

Depending on how you interact with our website, we may collect the following information.

Information You Provide Directly

When you contact us, place an order or otherwise interact with our website, we may collect:

¡       Your name

¡       Email address

¡       Telephone number

¡       Billing or delivery address

¡       Information contained in enquiries, messages or contact forms

¡       Order and purchase information

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, including:

¡       IP address

¡       Browser type and version

¡       Device information

¡       Website pages visited

¡       Date and time of visits

¡       Referring website information

¡       Cookie and analytics information where consent has been provided

How We Use Your Information

We use personal information to:

¡       Respond to enquiries and requests

¡       Provide customer support

¡       Process and fulfil orders

¡       Process payments

¡       Communicate with customers regarding products, services and orders

¡       Improve our website, products and services

¡       Monitor website performance and security

¡       Maintain business records

¡       Comply with legal and regulatory obligations

We do not sell your personal information to third parties.

Payments

Where purchases are made through our website, payments are processed securely by Stripe, our payment service provider.

Stripe may collect and process information including:

¡       Name

¡       Billing information

¡       Payment card details

¡       Email address

¡       Transaction details

Payment card information is processed directly by Stripe. Northern Rye does not store or have access to your full payment card details. Stripe processes personal information in accordance with its own privacy and security practices. Stripe’s cookie policy can be seen here.

Website Hosting and Commerce Platform

Our website is hosted and operated using Squarespace.

Squarespace provides website hosting, security, e-commerce functionality, analytics tools and related services necessary for the operation of this website.

As part of providing these services, Squarespace may process technical information relating to visitors and customers. To see Squarespace’s Pprivacy policy click here.

Analytics

We use analytics tools provided through Squarespace to help us understand how visitors use our website and how we can improve the user experience.

We also use Google Search Console to monitor how our website appears in Google Search results and to help improve its visibility and performance.

Analytics cookies are only activated where you have provided consent through our cookie banner and cookie preference settings.

Analytics information is used in an aggregated form and is not used to identify individual visitors.

Cookies

Cookies are small text files placed on your device when you visit a website.

Necessary Cookies

Necessary cookies are essential for the operation, security and functionality of the website and cannot be disabled through our cookie settings.

These cookies may be used to:

¡       Remember your cookie preferences

¡       Maintain website security

¡       Enable core website functionality

¡       Support website performance and reliability

Analytics Cookies

Analytics cookies help us understand how visitors interact with our website so that we can improve its performance, content and usability. These cookies are only activated where you have provided consent.

Managing Cookies

When you first visit our website, you can:

¡       Accept all cookies

¡       Reject non-essential cookies

¡       Manage your cookie preferences

You can update your cookie preferences at any time using the Cookie Preferences link available on our website.

You can also manage cookies through your browser settings.

Please note that disabling certain cookies may affect the functionality of the website.

Legal Basis for Processing

We process personal information on one or more of the following legal bases.

Consent

Where you choose to provide consent, including for analytics cookies.

Performance of a Contract

Where processing is necessary to fulfil orders, process payments, provide products or services, or respond to requests made by you.

Legal Obligation

Where processing is required to comply with legal or regulatory obligations.

Legitimate Interests

Where processing is necessary for the operation, security and improvement of our business and website, provided those interests do not override your rights and freedoms.

Sharing Your Information

We may share personal information with trusted third-party service providers where necessary to operate our business and website, including:

¡       Squarespace (website hosting and commerce platform)

¡       Stripe (payment processing)

¡       Professional advisers where required

¡       Regulatory authorities where required by law

We do not sell personal information and we do not share personal information for third-party marketing purposes.

International Transfers

Some of our service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards are used to ensure that information remains protected in accordance with applicable data protection laws.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including legal, accounting, taxation and regulatory requirements.

When personal information is no longer required, it is securely deleted or anonymised.

Your Rights

Under UK data protection law, you have the right to:

¡       Request access to your personal information

¡       Request correction of inaccurate or incomplete information

¡       Request deletion of personal information in certain circumstances

¡       Request restriction of processing in certain circumstances

¡       Object to certain types of processing

¡       Withdraw consent where processing is based on consent

¡       Request a copy of information you have provided to us

¡       Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the details below.

Data Protection

Northern Rye Ltd takes the protection of personal data seriously. We are committed to handling personal information lawfully, fairly, transparently and securely.

Our Data Protection Policy explains how we collect, use, store and protect personal information relating to customers, clients, suppliers, contractors, website users, visitors, business contacts and other non-employees.

You can read our policies here:

•⁠  ⁠Data Protection Policy

•⁠  ⁠Subject Access Request Policy

•⁠  ⁠Data Protection Complaints Policy

Accessing your personal data

You have the right to request access to the personal data we hold about you. This is known as a subject access request. Our Subject Access Request Policy explains how to make a request, what information you may receive, the timescales that apply, and when a request may be refused or extended.

Making a data protection complaint

If you believe we have mishandled your personal data or breached data protection law, you can complain directly to us. Our Data Protection Complaints Policy explains how to make a complaint and how we will respond.

You can contact us about data protection matters using the details below:

Email:bakery@northern-rye.co.uk

Post: Unit C2, Bergen Close, Tyne Tunnel Trading Estate, North Shields, NE29 7TA

Telephone: 0204 568 4331

Our Data Protection Officer is Robbie Livingstone and can be contacted at bakery@northern-rye.co.uk.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection matters. The ICO can be contacted at www.ico.org.uk or by telephone on 0303 123 1113.

Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in legal requirements, our services or our business practices. Any updates will be published on this page together with the revised "Last updated" date shown at the top of this policy.