Privacy policy
Last updated 28 October 2026
Fiamma Verde Ltd (“we”, “us”), 1 High Street, Watford, WD17 1AA, is the controller of the personal data described here. Contact us at hello@example.com about anything in this policy.
What we collect and why
- Order details (name, phone, email, delivery address, what you ordered and any notes): to make, deliver and charge for your order. Lawful basis: contract.
- Account details (name, email, phone, password stored as a salted hash, saved addresses, loyalty points): to run your account. Lawful basis: contract.
- Payment details: card payments are taken by Stripe on its own page. We never see or store your card number; we keep only the order amount and Stripe's reference. Lawful basis: contract and legal obligation (tax records).
- Messages and texts about your order (confirmation, ready, out for delivery). These are service messages, not marketing.
- Marketing emails only if you ticked the box. You can untick it in your account at any time.
- Security logs (IP address, device type) for staff sign-ins, to keep the system safe. Lawful basis: legitimate interests.
Who we share it with
Only the service providers needed to run the shop: our hosting provider, Stripe (payments), an email provider and Twilio (text messages), and the driver who delivers your order, who sees your name, address, phone number and order. We do not sell your data.
How long we keep it
Order and payment records for six years (UK tax law). Account details until you delete your account. Staff security logs for 12 months.
Your rights
Under UK GDPR you can ask to see, correct, download or delete your data, object to processing, and withdraw consent. Signed-in customers can download their data and delete their account from My account; otherwise email us. If you are unhappy with our answer you can complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We use only essential cookies. See the cookie policy.