Privacy Policy

1. Who We Are

Yammtree ("we", "us", "our") is a UK-based health food business selling natural and ancestral food products, digital guides, and cooking classes via this website. This policy explains what personal data we collect, why we collect it, and the rights you have under UK GDPR and the Data Protection Act 2018.

2. What Data We Collect

• Order information — name, delivery address, email address and order contents when you buy products or book a cooking class.
• Contact form submissions — your name, email address, phone number (optional) and message when you contact us via the website.
• Newsletter sign-ups — your email address, if you choose to subscribe to updates from Yammtree.
• Account data — email address and authentication details when you sign in with a password or Google account.
• Payment information — processed securely by our payment provider, Stripe. We do not store your full card details on our servers.

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders and cooking class bookings
• Deliver digital products (such as ebooks) securely by email link
• Respond to enquiries submitted through our contact form
• Send newsletter updates, where you have opted in
• Maintain the security of your account and our website
• Comply with our legal and tax obligations

4. Who We Share Your Data With

We share limited personal data with trusted third-party service providers who help us run our business, including:

• Stripe — to process payments securely. Stripe has its own privacy policy governing how it handles your payment data.
• Supabase — our database and file storage provider, used to store order records, account information, and digital product files.
• Email delivery providers — to send order confirmations, contact form replies, and digital product download links.

We never sell your personal data to third parties for marketing purposes.

5. Cookies

Our website uses essential cookies to keep you signed in and to remember items in your shopping basket. We may also use analytics cookies to help us understand how visitors use the site so we can improve it.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements (for example, UK tax law generally requires business records to be kept for at least six years).

7. Your Rights

Under UK GDPR, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data, in certain circumstances
• Object to or restrict how we process your data
• Withdraw consent at any time (for example, unsubscribe from our newsletter)
• Lodge a complaint with the Information Commissioner's Office (ICO)

8. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us at Yammtree@gmail.com or via our contact page.