Privacy Policy

Who we are

Somerset Shrimp Shack is a freshwater shrimp breeder based in Somerset, UK. We operate the website at somersetshrimpshack.uk. For any privacy-related questions, contact us at info@somersetshrimpshack.uk.

What data we collect

We collect the following information when you place an order or contact us:

• Name and email address
• Delivery address
• Order details and payment status (we do not store card details — payments are handled by Stripe)
• Messages sent via our contact form

We do not collect data through cookies beyond what is necessary for the site to function (e.g. your shopping cart). We do not use advertising trackers.

How we use your data

Your data is used to:

• Process and fulfil your order
• Send you order confirmation and shipping updates by email
• Respond to enquiries you've sent us
• Comply with legal obligations

We do not sell your data to third parties. We do not use your email address for marketing without your explicit consent.

Third parties

We share limited data with the following trusted services to operate the business:

• Stripe — payment processing. Stripe handles your card data directly and is PCI-DSS compliant.
• Courier provider — your name and delivery address are passed to our courier to fulfil delivery.
• Resend — transactional email (order confirmations, shipping updates).
• Cloudinary — image hosting for our product catalogue.

How long we keep your data

Order data is retained for up to 7 years for accounting and legal purposes, in line with HMRC requirements. Contact form messages are kept for up to 12 months and then deleted.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to how we process your data

To exercise any of these rights, email us at info@somersetshrimpshack.uk. We'll respond within 30 days.

Security

Our website uses HTTPS throughout. Payments are handled entirely by Stripe and never pass through our servers. We take reasonable steps to protect your data, but no system is completely secure — if you have concerns, please get in touch.

Changes to this policy

If we make significant changes to this policy, we'll update the date at the top of this page. We won't notify you by email for minor wording changes.