Privacy Policy

Last updated: 25 April 2026

This Privacy Policy explains how Andrews of Holmfirth (“we”, “us”, “our”) collects, uses and protects your personal information when you visit andrewsofholmfirth.co.uk or interact with us in person, by phone, by email or via WhatsApp.

1. Who we are

We are Andrews of Holmfirth, a family-run greengrocers based at:

For any questions about this Privacy Policy or how we handle your data, contact us at jh@andrewsofholmfirth.co.uk or call 01484 682787.

ICO registration: [TBD — if registered with the Information Commissioner’s Office, the registration number will be added here.]

2. What information we collect

We collect the following categories of personal information:

• Information you give us directly — for example when you fill in our contact form (name, email address, phone number, message), place a WooCommerce order (name, delivery address, billing address, email, phone, order details), or message us on WhatsApp.
• Order & payment information — if you place an order through our website, payment is processed by Stripe via WooPayments. We never see or store your full card details; we only receive confirmation that payment has been taken and basic order metadata.
• Website usage information — standard server logs (IP address, browser type, pages visited, referring URL, timestamp), and aggregated analytics where you have consented to analytics cookies.
• Cookies and similar technologies — see Section 9 below for full details.

3. How we use your information

We use your personal information to:

• Respond to your enquiries (contact form, WhatsApp messages, phone calls).
• Process and fulfil orders placed through our online shop, and contact you about your order.
• Comply with our legal obligations (for example, retaining VAT/sales records as required by HMRC).
• Improve the website, understand which content is useful, and detect and prevent fraud or abuse.

4. Legal basis for processing (UK GDPR Article 6)

We rely on the following legal bases for processing your personal information:

• Performance of a contract — for processing your orders and providing the goods you have ordered.
• Legitimate interests — for responding to enquiries, basic site analytics, and protecting the site from fraud or abuse. You have the right to object to processing based on legitimate interests at any time.
• Consent — for non-essential cookies (analytics, marketing) and for any marketing emails. You can withdraw consent at any time.
• Legal obligation — for retaining records required by tax, accounting and consumer protection law.

5. Who we share your information with

We do not sell your personal information. We share it only with the following categories of recipient, and only as needed to deliver our service to you:

• Stripe / WooPayments — payment processing. Stripe Inc. is based in the United States; transfers are covered by Standard Contractual Clauses and Stripe’s UK GDPR-compliant data processing terms.
• Our hosting provider — for storing the website and order data securely.
• Email/SMS providers — if you contact us, your message is delivered via standard email infrastructure.
• Google Analytics — if you have consented to analytics cookies, anonymised usage data is shared with Google for the purpose of website analytics. You can opt out at any time via the cookie consent banner.
• Law enforcement or regulators — if we are required by law to disclose information.

6. International transfers

Some of our service providers (notably Stripe and Google) are based outside the United Kingdom and the European Economic Area. Where this is the case, we ensure that the transfer is protected by appropriate safeguards under UK GDPR — typically Standard Contractual Clauses or the UK’s International Data Transfer Addendum.

7. How long we keep your information

• Contact form enquiries: up to 12 months from the date of last contact.
• Order records: 6 years (the period required by HMRC for VAT records).
• Analytics data: up to 26 months in Google Analytics (the default).
• Server logs: typically 30–90 days, depending on our hosting provider’s configuration.

8. Your rights under UK GDPR

You have the following rights in relation to your personal information:

• Right of access — to ask for a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete information.
• Right to erasure (“right to be forgotten”) — to ask us to delete your personal data, subject to our legal obligations to retain certain records.
• Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing based on legitimate interests, including marketing.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at jh@andrewsofholmfirth.co.uk. We will respond within one calendar month.

9. Cookies

Our website uses cookies for the following purposes:

• Essential cookies — required for core site functionality such as the WooCommerce shopping cart and user sessions. These cannot be turned off.
• Analytics cookies — used (with your consent) to understand how visitors use the site so we can improve it.
• Functional cookies — used to remember preferences such as your cookie consent choice itself.

You can manage your cookie preferences at any time using the cookie consent banner that appears on your first visit, or by clearing your browser’s cookies for this site.

10. Children’s privacy

This website is not directed at children under the age of 16, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The “Last updated” date at the top of this page will indicate when the policy was last revised. We encourage you to review this page periodically.

12. Complaints

If you have a concern about how we handle your personal information, please contact us first at jh@andrewsofholmfirth.co.uk — we’ll do our best to put it right.

If you remain unhappy, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):