Last updated: 13 October 2026
This notice explains how The Farmhouse Kitchen collects and uses your personal information when you visit our website or place an order, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
The Farmhouse Kitchen, Main Bakery, 82a Old Park Lane, Southport, PR9 7BT. Telephone 01704 601071 (option 1).
We are the data controller for the personal information described in this notice.
Data protection contact
Our data protection contact, and the person responsible for dealing with the Information Commissioner’s Office (ICO) on our behalf, is:
Robert Marshall
Email: sausagerolls@thefarmhousekitchen.co.uk
Post: The Farmhouse Kitchen, Main Bakery, 82a Old Park Lane, Southport, PR9 7BT
Please contact Robert with any question about your data or to exercise any of your rights below.
What information we collect
- Order details: your name, billing and delivery address, email address, phone number, the products you order, and any notes you add to your order.
- Account details (only if you create an account): your login name and password, which is stored encrypted, plus your saved addresses and order history.
- Payment information: card payments are handled by our payment provider, Square. We never see or store your full card details. We receive confirmation of payment and the last four digits of the card.
- Technical information: your IP address, browser type and the pages you visit. Our security software uses this to protect the website against attacks and fraud.
- Communications: emails, calls or messages you send us.
How and why we use it
- To take, prepare and fulfil your order, including collection or delivery on Christmas Eve, taking your deposit and recording the balance due. Our lawful basis is the performance of a contract with you.
- To contact you about your order, for example to confirm it or tell you about any change. Lawful basis: contract.
- To keep financial and tax records. Lawful basis: legal obligation.
- To keep our website secure and prevent fraud. Lawful basis: our legitimate interests in protecting our business and customers.
We do not sell your personal information. We do not send marketing emails unless you have separately agreed to receive them.
Who we share it with
We share only what is needed with trusted service providers who act on our instructions:
- Square: to process card payments.
- Our website hosting provider: to run this website and store order records.
- Wordfence, our website security service: to block malicious traffic. This involves processing IP addresses.
- Email providers: to send order confirmations and receipts.
Some of these providers may process data outside the UK. Where they do, they use legally recognised safeguards, such as the UK International Data Transfer Agreement or adequacy regulations. We may also disclose information where required by law, for example to HMRC or the police.
How long we keep it
- Order and payment records: 6 years from the end of the financial year they relate to, as required for tax purposes.
- Customer accounts: until you ask us to close your account.
- Security logs: generally no longer than 90 days.
Cookies
Our website uses only the cookies needed for it to work. These include cookies that remember the contents of your basket and keep you logged in, and security cookies that help us block attacks. We do not use advertising or tracking cookies. Our payment provider may set its own cookies during checkout to prevent fraud.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, where we are not required to keep it;
- object to, or ask us to restrict, how we use your information;
- ask for your information in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, contact Robert Marshall at sausagerolls@thefarmhousekitchen.co.uk. We will respond within one month. There is normally no charge.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Changes to this notice
We may update this notice from time to time. The latest version will always be on this page.