Privacy Policy
Last updated: 24 October 2026
Concrete & Custard ("we", "us") takes your privacy seriously. This policy explains what personal information we collect through this website, why we collect it, and what we do with it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Concrete & Custard is a small independent food business based in the United Kingdom.
Contact for privacy matters: hello@concreteandcustard.co.uk
What we collect and why
| Information | When | Why (lawful basis) |
|---|---|---|
| Name, email, phone number | When you place an order or contact us | To process and fulfil your order and reply to you (contract / legitimate interest) |
| Delivery details | If you choose local delivery | To deliver your order (contract) |
| Order details & notes | When you place an order | To make your order correctly, including allergy notes (contract; substantial public interest for health information you volunteer) |
| Basket contents | While you browse | Stored temporarily in a session cookie so your basket works (legitimate interest) |
We do not sell your data, and we don't send marketing emails unless you have specifically opted in.
Payments
We do not take card payments through this website. Payment is arranged directly with you on collection or delivery, or by bank transfer. We never ask for or store card details on this site.
How long we keep it
- Order records: up to 6 years (for accounting and tax purposes).
- Contact form messages: up to 12 months after we resolve your enquiry.
- Basket session data: deleted when your browser session ends.
Who we share it with
Only where necessary to run the business: our website hosting provider (which stores this website and its data), and HMRC or other authorities where the law requires. We never share your details for marketing.
Cookies
See our separate Cookie Policy for full details of the cookies this site uses.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, and the right to data portability. To exercise any right, email hello@concreteandcustard.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Children
Our website is not aimed at children and we do not knowingly collect personal data from anyone under 13. Orders must be placed by an adult.
Changes to this policy
If we change how we handle your data we will update this page and the date at the top.