Privacy policy

Last updated: June 2026

This policy explains how Sea & Seeds(“we”, “us”, “our”) collects and uses your personal information when you order from us, contact us, or use our website at seaandseeds.co.uk. We are committed to protecting your privacy and handling your data in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Sea & Seeds is a fish & chip shop and falafel bar based at 46 High Street, Leatherhead, Surrey, KT22 8AJ. We are the data controller responsible for your personal information.

If you have any questions about this policy or how we use your data, you can contact us by phone on xxxxx-xxxxxx or in person at 46 High Street, Leatherhead, KT22 8AJ.

Information we collect

We only collect what we need to take your order and run our website. This may include:

• Information you give us when ordering or enquiring — your name, phone number, and (for delivery) your address, along with your order details and any notes you add, such as allergy information.
• Payment information — when you pay online or over the phone, your card details are handled securely by our payment provider. We do not store full card numbers.
• Contact details you share — if you call us or get in touch about an order or enquiry.
• Website and analytics data — basic technical information such as your device type, browser, and how you use the site, collected through cookies and similar technologies (see our cookie policy).

How we use your information

• To prepare, take payment for, and fulfil your order.
• To deliver your order, or to let you know when it’s ready for collection.
• To respond to your enquiries, feedback or complaints.
• To run, maintain and improve our website and understand how it’s used.
• To send you marketing or loyalty offers — but only where you have asked us to (see below).
• To meet our legal and accounting obligations, and to keep our business and customers safe.

Our lawful bases

Under UK GDPR we must have a lawful basis for using your information. We rely on:

• Contract— to take and fulfil your order and provide the service you’ve asked for.
• Legitimate interests— to run and improve our business and website, and to keep proper records, in a way that doesn’t override your rights.
• Consent — for non-essential cookies and analytics, and for any marketing messages. You can withdraw consent at any time.
• Legal obligation— where we’re required to keep information, for example for tax purposes.

Analytics

We use Google Analytics 4 to understand how visitors use our website so we can improve it. This is set up with IP anonymisation, and we only set analytics cookies where you’ve agreed to them. We don’t use this information to identify you personally. For more detail, see our cookie policy.

Marketing & loyalty

We’ll only send you marketing messages, or add you to a customer database for offers, if you’ve opted in — for example by signing up for our loyalty voucher book or asking to hear about promotions. Every marketing message includes a way to opt out, and you can ask us to stop at any time by contacting us.

Who we share it with

We do not sell your personal information. We share it only where it’s necessary to provide our service, including with:

• Delivery partners — such as Deliveroo, Just Eat and Uber Eats, when you order through their platforms, so they can deliver your food.
• Payment processors — to take payment securely.
• Service providers — such as our website host and analytics provider, who act on our instructions.
• Authorities — where we are required to by law.

When you order through a third-party platform, that platform handles your data under its own privacy policy as well.

How long we keep it

We keep your information only for as long as we need it — to fulfil your order, deal with any follow-up, and meet our legal and accounting obligations. Order and transaction records are typically kept for up to six years to satisfy tax requirements. Marketing preferences are kept until you ask us to remove them.

Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you.
• Ask us to correct anything that’s inaccurate.
• Ask us to delete your information, or restrict how we use it, in certain circumstances.
• Object to us using your information for marketing.
• Withdraw your consent at any time.
• Ask for a copy of certain data in a portable format.

To exercise any of these rights, please contact us using the details above. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk, though we’d appreciate the chance to put things right first.

Cookies

Our website uses a small number of cookies and similar technologies. You can read about these, and how to manage them, in our cookie policy.

Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “last updated” date at the top of this page. Please check back occasionally to stay informed.

Contact us

If you have any questions about this policy or your personal information, please contact us at 46 High Street, Leatherhead, KT22 8AJ, or by phone on xxxxx-xxxxxx.