Privacy policy

Before you publish: replace every placeholder in [square brackets] with your real details, and have this checked by someone qualified. Then delete this note.

Who we are

LOWKEY is a trading name of Joseph Brown, a sole trader based in England. Our address for correspondence is 12 Glebe Road, RG2 7AG.

For the purposes of UK data protection law we are the data controller for the personal information described here. You can reach us at lowkey.sauces@gmail.com.

What we collect

We keep this deliberately short. Depending on how you use the site, we may hold:

Order details — your name, delivery address, email address, phone number if you give us one, and what you bought.
Payment information — handled entirely by our payment provider, Shopify. We receive confirmation that a payment succeeded and the last four digits of the card. We never see or store full card numbers.
Correspondence — emails or messages you send us, so we can answer them.
Marketing preferences — your email address if you sign up to our list, and whether you have unsubscribed.
Technical information — basic details your browser sends, such as IP address, device type and pages viewed, where analytics are switched on.

We do not ask for anything we do not need, and we do not buy personal data from anyone else.

Why we use it, and our lawful basis

To fulfil your order — because we have a contract with you.
To answer your questions — because it is in our legitimate interest to run a business people can talk to.
To keep accounting and tax records — because we have a legal obligation to.
To send marketing emails — because you consented, or because you bought from us and we are telling you about similar things. You can stop this at any time.
To understand how the site is used — with your consent, where analytics cookies are set.

Cookies and similar technology

The site uses your browser’s local storage to remember what is in your bag between visits. That information stays on your device and is never sent to us.

[If and when you add analytics or advertising cookies, describe them here and make sure a consent banner is in place before they are set.]

We share personal information only with the suppliers who help us run the shop:

Shopify, to take payment.
[Delivery partner], to deliver your order.
[Email provider], to send order confirmations and, if you asked for them, marketing emails.
[Hosting provider], which stores the site and its data.

We do not sell personal data. We will disclose information if the law requires it, and we will tell you where we are allowed to.

How long we keep it

Order and transaction records: six years after the end of the relevant tax year, because HMRC requires it.
Marketing contacts: until you unsubscribe, then a minimal record so we do not email you again by mistake.
Correspondence: [24 months], unless it relates to an ongoing matter.

Your rights

Under UK GDPR you can ask us to:

give you a copy of the personal data we hold about you;
correct anything that is wrong;
delete it, where we do not need it for a legal reason;
restrict or object to how we use it;
send it to another provider in a portable format;
withdraw consent, where consent was our basis for using it.

Email lowkey.sauces@gmail.com and we will respond within one month. There is no charge.

Marketing emails

Every marketing email has an unsubscribe link, and it works immediately. You can also just reply and ask. Unsubscribing does not stop order confirmations, which we have to send.

Security

The site is served over HTTPS and access to order data is limited to the people who need it. No system is perfect; if a breach ever affects your rights we will tell you and the ICO as required.

Contact and complaints

Write to lowkey.sauces@gmail.com or 12 Glebe Road, RG2 7AG.

If you are not happy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. We would rather you told us first so we can put it right.