Last updated: 9 November 2026
This notice explains what personal information Edinburgh Honey Co collects when you shop with us online or in our shops, why we use it, who we share it with, and the choices you have.
1. Who we are
Edinburgh Honey Company Ltd (“Edinburgh Honey Co”, “we”, “us”) is the controller of your personal information. We are registered in Scotland, company number SC578844.
- Registered office: 178 Easter Road, Edinburgh, EH7 5QQ
- Email: hello@edinburghhoney.co.uk
- Phone: 0131 629 5437
Our shops:
– Leith — 178 Easter Road, Edinburgh, EH7 5QQ
– Morningside — 245 Morningside Road, Edinburgh, EH10 4QU
– Canonmills — 16 Rodney Street, Edinburgh, EH7 4EA
For any privacy question or request, email hello@edinburghhoney.co.uk with “Privacy” in the subject line.
2. What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Order details | name, billing and delivery address, email, phone, what you bought, order notes | you, at checkout |
| Payment details | card or wallet type, last four digits, payment status | our payment providers (we never see or store your full card number) |
| Account details | login email, password (stored encrypted), saved addresses, order history | you, if you create an account |
| Basket details | email and basket contents entered at checkout | you, at checkout, even if you don’t finish the order |
| Newsletter details | email address, which emails you open or click | you, when you sign up |
| Messages | emails, phone calls, reviews, comments | you |
| Website and device data | pages viewed, device and browser type, approximate location from IP address, how you arrived at our site (for example which advert or link) | cookies and similar technology — only with your consent, except strictly necessary cookies |
| Business customer details | name, business, contact details, orders | you or your business (wholesale and trade customers) |
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Take, pay for, pack and deliver your order; send order and delivery emails; handle returns and refunds | Contract |
| Run your customer account | Contract |
| Keep order and financial records for tax and accounting | Legal obligation |
| Prevent fraud and keep the website secure (payment fraud checks, spam and bot protection) | Legitimate interests (protecting our customers and business) |
| Answer your questions and complaints | Legitimate interests (customer service); contract where it relates to an order |
| Send our newsletter | Consent — unsubscribe any time with the link in every email |
| Send a reminder if you leave items in your basket at checkout | Legitimate interests (helping you finish an order you started). Every reminder has an unsubscribe link and you can object at any time by emailing us |
| Measure how our website is used and improve it (Google Analytics, PostHog) | Consent (cookie banner) |
| Show and measure our adverts on Google, Facebook and Instagram, and record which advert led to an order | Consent (cookie banner) |
| Manage wholesale and trade customers | Legitimate interests (running our business) |
We do not sell your personal information.
4. Advertising and measurement in more detail
If you accept advertising cookies:
– Google (Google Ads, Google Analytics) and Meta (Facebook and Instagram) receive information about your visit and, if you buy, about your order (order value and products).
– To match a purchase to an advert, we send Google and Meta your email address, phone number and address in a scrambled (hashed) form from our website. They use this to measure our adverts, not to give us your details.
– We record the advert or link that brought you to us with your order.
If you reject or ignore the cookie banner, these tools do not run and your order is recorded without that information. You can change your choice at any time with the cookie settings button on our website.
5. Who we share it with
We share personal information only with providers who help us run the business, and only what they need:
| Who | Why |
|---|---|
| Stripe (including Apple Pay, Google Pay, Link and Klarna through Stripe) | Online payments and fraud checks |
| Zettle by PayPal | Card payments in our shops |
| Delivery companies | Delivering your order |
| Our website host and WordPress/WooCommerce service providers (including Automattic for Jetpack, site statistics, image delivery and spam filtering) | Running the website and shop |
| Email service providers | Sending order, account and basket-reminder emails |
| Zoho | Newsletter (Zoho Campaigns) and customer records (Zoho CRM) |
| Analytics, advertising, Google Shopping, website fonts | |
| Meta Platforms | Facebook and Instagram advertising (with your consent) |
| PostHog | Website analytics (EU servers, with your consent) |
| CookieYes | Recording your cookie choices |
| Cloudflare | Bot and spam protection on forms |
| Faire | Wholesale orders placed through Faire |
| Accountants, professional advisers, HMRC and other authorities | Where needed for our accounts or required by law |
Some providers (for example Stripe, Zettle, Google and Meta) decide for themselves how to use some data, such as for fraud prevention. Their own privacy notices apply to that use.
6. International transfers
Some of our providers are based in, or use servers in, other countries, including the United States. When personal information leaves the UK, it is protected by UK adequacy regulations (including the UK–US data bridge for certified US companies) or by the ICO’s International Data Transfer Agreement or Addendum. Email us for more details.
7. How long we keep it
| Data | How long |
|---|---|
| Orders, invoices and payment records | 6 years after the end of the financial year they relate to (tax law) |
| Customer account | until you ask us to close it; order records are then kept as above |
| Basket details from an unfinished checkout | reminders stop after 30 days; the record is deleted after 12 months |
| Newsletter | until you unsubscribe; we keep your email on a “do not send” list so we don’t email you again |
| Messages and complaints | up to 2 years after the matter is closed |
| Website analytics | up to 14 months in Google Analytics; PostHog for the period set in our account |
| Cookie choices | 12 months, then we ask again |
8. Your rights
You have the right to:
– get a copy of your personal information
– have wrong information corrected
– have information deleted
– restrict or object to how we use it — including stopping marketing at any time
– receive your information in a portable format
– withdraw consent at any time (this doesn’t affect what we did before)
To use a right, email hello@edinburghhoney.co.uk. We reply within one month. It’s free.
9. Complaints
Please tell us first at hello@edinburghhoney.co.uk — we’ll acknowledge your complaint within 30 days and tell you what we’re doing about it.
You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint · 0303 123 1113.
10. Cookies
We use cookies and similar technology. Our banner groups them like this:
| Category | What it does | Examples | Needs your consent? |
|---|---|---|---|
| Necessary | makes the shop work: basket, checkout, payments, security, remembering your cookie choice | WooCommerce, Stripe, CookieYes | No |
| Functional | extra features, such as the newsletter sign-up box | Zoho Campaigns | Yes |
| Analytics | shows us how the site is used so we can improve it | Google Analytics, PostHog, Jetpack statistics | Yes |
| Advertisement | shows and measures our adverts and records which advert led to an order | Google Ads, Meta pixel, WooCommerce order attribution | Yes |
The full list of cookies, with how long each lasts, is in our Cookie Policy. Change your choice any time with the cookie settings button.
11. Children
Our website is not aimed at children under 13 and we don’t knowingly collect their information.
12. Changes
We’ll update this notice when how we use personal information changes. The date at the top shows the latest version.