Privacy policy

The European General Data Protection Regulation (GDPR) became effective from 25th May 2018.  The Bay Tree Food Co Ltd is the controller and must ensure personal data is processed securely, lawfully, transparently and for specific use.

The Bay Tree Food Co Ltd complies fully with ensuring your personal data is protected under the GDPR guidelines. We use the information that we learn from customers to process orders, despatch goods, process payments, communicate with you about orders, products, services, promotional offers and recipes and update our customer records. Here are the types of information we gather and our policies:

 1. Information you give us which you enter on our website or give us by other means. We use this information to respond to you and communicate with you. Information you may supply us with include: your name, address, phone number, e-mail addresses. All credit and debit card details are sent direct to Sage Pay whose server is PCI and GDPR compliant. We do not store any of your credit and debit card details. All personal data we hold is stored securely and in accordance with the GDPR guidelines.

 2. Information from other sources: we might receive information about you from other sources and add this to your account information. An Example of information we receive from other sources would include updated delivery and address information from our carriers or other third parties, which we use to update our customer records.

3. We store information about you when you sign up to our email newsletter which allows us to contact you with information and promotions we offer. You may opt-out of this service at any time.

4. If you place an order with us, we will generally keep your data for seven years from the date of your last order.

5. All personal data will be collected and used transparently. We will only use your data for the purpose in which it was stated. Any data which is no longer necessary to the purpose for which it is collected will be deleted securely.

6. You have the right to request access to your data we hold on file for you at reasonable intervals. We will respond within one month.

7. We do not share any personal details with any third parties unless you have given us permission. Examples may include opting-in to third-party newsletters via our website competitions.

8. The Legal basis for which we process Personal data are:

Customer marketing and newsletters: Consent: the individual will have given clear consent for The Bay Tree to process their personal data for a specific purpose.

Customer orders received:  Contract: the processing is necessary for a contract The Bay Tree has with the individual, or because they have asked The Bay Tree to take specific steps before entering into a contract

9. Your data rights: You have the right to request access, modification or deletion of the information held about you under law. Please direct any data queries to

10. The Data Protection Officer (DPO) at The Bay Tree Food Co is Nigel Hodgson

We will always ensure the ongoing GDPR compliant processing, transparency and security of personal data.

If you have any concerns about privacy at The Bay Tree Food Co Ltd, please contact us and we will try to resolve the issue for you. Our business is evolving all the time and our Privacy Policy will change also. You should check our website frequently to see any changes. Unless otherwise stated, our current Privacy Notice applies to all information that we have about you and your account.