Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. We are committed to keeping your data safe and being transparent about how we use it.

We are Honeybee Collective Ltd, trading as HoneyBee & Co., a company registered in England and Wales. Our company registration number is 12943182 and our registered office is at 4 The Pavilion, Lily’s Walk, High Wycombe, HP11 2FX, United Kingdom.

What Information We Collect

When you place an order or create an account

• Your name and email address
• Your delivery and billing address
• Your phone number (if provided)
• Your payment details (processed securely by our payment providers; we do not store your full card details)
• Your order history and subscription details

When you browse our website

• Your IP address and browser type
• Pages you visit and how you interact with our site
• Information from cookies and similar technologies (see the Cookies section below)

When you contact us or leave a review

• Your name and email address
• The content of your message or review
• Your star rating (if leaving a product or recipe review)

How We Use Your Information

We use your information to:

• Process and deliver your orders and subscriptions
• Send you order confirmations, dispatch notifications, and delivery updates
• Manage your account and provide customer support
• Send you newsletters and marketing emails (only if you have opted in)
• Improve our website, products, and services
• Comply with legal and regulatory requirements
• Detect and prevent fraud

We will not share your personal information with third parties for their own marketing purposes.

Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract: to fulfil orders, manage subscriptions, and provide customer service
• Consent: to send marketing emails and newsletters (you can withdraw consent at any time)
• Legitimate interest: to improve our website and services, prevent fraud, and analyse site usage
• Legal obligation: to comply with tax, accounting, and regulatory requirements

How Long We Keep Your Data

We keep your data for as long as you have an active account or subscription with us. If you make a one-off purchase, we retain your order data for 6 years to comply with UK tax and accounting requirements.

Marketing data is retained until you unsubscribe. You can request deletion of your data at any time (see Your Rights below).

Where We Store Your Data

Your data is stored securely within the United Kingdom and European Economic Area. Our website is hosted on servers within the EU. We use industry-standard security measures to protect your data.

Our payment processing is handled by Stripe and PayPal, both of which maintain their own security certifications and privacy policies. We do not store your full payment card details on our servers.

Who We Share Your Data With

We share your data only with the following categories of service providers, solely for the purpose of operating our business:

• Payment processors (Stripe, PayPal) for processing transactions
• Shipping carriers (Royal Mail) for delivering your orders
• Email service providers for transactional and marketing emails
• Website hosting and performance providers
• Analytics providers for understanding site usage in aggregate

All service providers are contractually obligated to handle your data securely and only for the purposes we specify. We do not sell your data to anyone.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct any inaccurate or incomplete data
• Right to erasure: You can ask us to delete your personal data, subject to legal retention requirements
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances
• Right to data portability: You can request your data in a structured, machine-readable format
• Right to object: You can object to our processing of your data for direct marketing at any time
• Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time

To exercise any of these rights, please email [email protected]. We will respond within 30 days.

Marketing Communications

We send marketing emails and newsletters only to customers who have opted in. You can unsubscribe at any time by clicking the “Unsubscribe” link in any marketing email, or by emailing [email protected].

Transactional emails (order confirmations, dispatch notifications, subscription reminders) are not marketing and will continue for as long as you have an active order or subscription.

Cookies

What are cookies?

Cookies are small text files placed on your device by websites you visit. They help websites remember your preferences and understand how you interact with the site.

Cookies we use

• Essential cookies: Required for the website to function (login sessions, basket contents, security). These cannot be disabled without affecting the website
• Analytics cookies: We use privacy-focused analytics to understand how visitors use our site in aggregate. No personally identifiable information is shared with analytics providers
• Marketing cookies: If you opt in, we may use cookies to measure the effectiveness of our advertising. You can manage your preferences using the cookie settings on our website

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may affect the functionality of our website.

Children

Our products and services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately and we will delete it.

International Transfers

As we prepare to offer international and EU shipping, we may process orders from customers outside the United Kingdom. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or by posting a notice on our website. The “Last updated” date at the top of this page indicates when the policy was last revised.

How to Complain

If you have a concern about how we handle your data, please contact us first at [email protected]. We will do our best to resolve the matter.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):