Privacy Policy
How we collect, use, and protect your personal information when you order from or contact SuGre.
SuGre ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. SuGre is the data controller responsible for your personal data.
1. Information We Collect
We only collect information that we need to respond to your enquiry and fulfil your order. This may include:
- Contact details — your name, email address, and phone number;
- Order details — delivery address, order requirements, dates, and any dietary or allergen information you choose to share;
- Messages — the content of messages you send us via the contact form, WhatsApp, Instagram, or email;
- Technical data — basic, anonymised information about how you use our website (see Cookies below).
2. How We Use Your Information
We use your personal data to:
- respond to your enquiries and provide quotes;
- process, confirm, prepare, and deliver your order;
- communicate with you about your order;
- keep records required for our business and for food safety purposes;
- where you have agreed, send you occasional updates about our products.
The legal bases on which we process your data are: performance of a contract (to fulfil your order), legitimate interests (to run and improve our business), legal obligation (e.g. food safety and tax records), and consent (for any marketing, which you can withdraw at any time).
3. Sharing Your Information
We do not sell your personal data. We only share it where necessary to operate our business — for example with delivery providers, or with service providers who help us run our website or process payments. Any such providers are required to keep your data secure and use it only for the agreed purpose. We may also disclose information where required by law.
4. How Long We Keep Your Information
We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. Order and financial records are typically retained for up to six years in line with HMRC requirements. Enquiry messages that do not lead to an order are deleted when no longer needed.
5. Your Rights
Under UK data protection law you have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data where there is no legal reason for us to keep it;
- object to or restrict our processing of your data;
- withdraw consent at any time where we rely on consent;
- request a copy of your data in a portable format.
To exercise any of these rights, please contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
6. Data Security
We take reasonable technical and organisational measures to keep your personal data secure and to prevent unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
7. Cookies
Our website uses a small number of cookies and similar technologies to function correctly and to understand how visitors use the site. You can control or disable cookies through your browser settings. For more detail, see our Cookie Policy.
8. Third-Party Links
Our website and messages may contain links to third-party platforms such as Instagram and WhatsApp. We are not responsible for the privacy practices of those platforms, and we encourage you to read their own privacy policies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.
10. Contact Us
If you have any questions about this policy or how we handle your data, please contact us at order@sugre.uk.
Last updated: June 2026