Privacy Policy

‍Last updated: June 2026

‍Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Tempeh Meades Ltd collects, uses, and protects your personal data when you visit our website or buy from our online shop. We are committed to protecting your privacy and handling your data in an open and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Tempeh Meades Ltd is the data controller responsible for your personal data. We are a company registered in England and Wales (company number 12088946), with our registered office at 5 West Croft Lane, Sandford, BS25 5AJ.

We are registered with the Information Commissioner's Office (ICO) as a data controller.

If you have any questions about this policy or about how we handle your data, you can contact us at hello@tempehmeades.com.

The personal data we collect

We collect and process the following types of personal data.

Information you give us. When you place an order or contact us, this includes your name, billing and delivery address, email address, phone number (if you provide one), and the details of your order. When you sign up to our newsletter, this includes your name and email address.

Payment information. Card payments are processed securely by our payment provider, Stripe. We do not see or store your full card details. We may retain limited information such as the last few digits of your card and confirmation that payment was made.

Information we collect automatically. When you use our website we may collect technical and usage information, including your IP address, device and browser type, the pages you visit, and how you interact with the site. Some of this is collected through cookies. Please see our Cookie Policy for more detail.

How we use your data and our lawful basis

We use your personal data for the following purposes, relying on the lawful bases set out below.

To process and fulfil your orders. This includes taking payment, arranging packing and delivery, and keeping you updated about your order. Our lawful basis is the performance of a contract with you.

To respond to your enquiries. When you contact us, we use your details to reply and assist you. Our lawful basis is our legitimate interest in responding to customers, or the performance of a contract.

To send marketing emails. If you have signed up to our newsletter, we use your details to send you updates, offers, and content. We use a double opt-in process, meaning you confirm your subscription before we add you to our list. Our lawful basis is your consent, which you can withdraw at any time using the unsubscribe link in any email.

To improve our website and business. We use analytics to understand how our site is used. Our lawful basis is your consent, given through our cookie banner.

For advertising. We use the Meta Pixel to measure and improve our advertising. Our lawful basis is your consent, given through our cookie banner.

To meet our legal obligations. We keep records of transactions for accounting, tax, and regulatory purposes. Our lawful basis is compliance with a legal obligation.

To prevent fraud and keep our business secure. Our lawful basis is our legitimate interest in protecting our business and our customers.

Who we share your data with

We do not sell your personal data. We share it only with the following categories of recipient, and only as needed.

  • Stripe, our payment processor, to take payment securely.

  • DPD, our delivery courier, to deliver your order.

  • Our packing and fulfilment partner, who packs and dispatches your order.

  • MailerLite, our email marketing platform, if you have subscribed to our newsletter.

  • Google, for website analytics (Google Analytics 4 via Google Tag Manager), where you have consented.

  • Meta, for advertising measurement (the Meta Pixel), where you have consented.

  • Squarespace, which hosts our website and online shop.

  • Professional advisers such as our accountants, where reasonably necessary.

  • Public authorities, regulators, or law enforcement, where we are legally required to do so.

Each of these providers processes your data on our behalf or for their own defined purposes, and is required to keep it secure.

International transfers

We ship within the United Kingdom only. However, some of the service providers listed above may process personal data outside the UK, for example in the United States or the European Economic Area. Where data is transferred outside the UK, we rely on appropriate safeguards, such as adequacy regulations, the International Data Transfer Agreement, or Standard Contractual Clauses, to ensure your data remains protected.

How long we keep your data

We keep your personal data only for as long as we need it.

  • Order and transaction records are kept for at least six years, to meet our tax and accounting obligations.

  • Newsletter subscription data is kept until you unsubscribe or ask us to remove it.

  • General enquiries are kept for as long as needed to deal with them and for a reasonable period afterwards.

When we no longer need your data, we delete it securely or anonymise it.

Your rights

Under UK data protection law you have a number of rights over your personal data. These include the right to:

  • access the personal data we hold about you;

  • ask us to correct inaccurate or incomplete data;

  • ask us to delete your data in certain circumstances;

  • ask us to restrict or object to our processing in certain circumstances;

  • ask us to transfer your data to another provider (data portability);

  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, please contact us at hello@tempehmeades.com. We will respond within the time limits set by law, usually within one month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office. You can contact the ICO at ico.org.uk or by calling its helpline. We would, however, appreciate the chance to address your concerns first.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payment processing is handled by Stripe over secure, encrypted connections, and we do not store your full card details.

Children

Our website and products are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Where changes are significant, we will take reasonable steps to make you aware.

Contact us

For any questions about this policy or your personal data, please contact us at hello@tempehmeades.com, or write to us at Tempeh Meades Ltd, 5 West Croft Lane, Sandford, BS25 5AJ.