Last updated: July 2026
The Finest Trade Produce Ltd ("we", "us") is the data controller for personal data collected through this website and our trade portal.
1533490371-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom[TODO: ICO registration number][TODO: contact email]| Purpose | UK GDPR Article 6 basis |
|---|---|
| Reviewing your trade application | Legitimate interests (assessing trade buyers) |
| Processing orders, deliveries, invoices | Performance of a contract |
| Transactional emails about your account | Performance of a contract |
| Tax, accounting & food traceability records | Legal obligation |
| Security, fraud prevention, debt recovery | Legitimate interests |
| Marketing emails (if any) | Consent (you can withdraw at any time) |
We do not sell personal data. We share data only with service providers needed to run the portal — currently hosting and database (Lovable Cloud / Supabase), transactional email delivery (Resend) and payment processing — and with regulators, accountants or law enforcement where legally required. All processors are bound by written data-processing terms.
Some of our processors may store or process data outside the UK (typically in the EEA or the United States). Where this happens we rely on UK adequacy regulations, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, as appropriate.
We keep account, order and invoice data for as long as your account is active and afterwards for the period required by UK tax and company law (currently six years from the end of the relevant financial year). Support messages and issue reports are kept for up to two years. Closed accounts are anonymised after the relevant retention period.
Under UK GDPR you have the right to:
Email [TODO: contact email] to exercise any of these rights. We will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Transactional emails (order confirmations, invoices, account notices) are part of providing the service and cannot be opted out of while your account is active. Any other email includes an unsubscribe link and you can also email us to opt out.
We use only the cookies and local storage strictly necessary to keep you logged in and to operate the portal. We do not use advertising or third-party tracking cookies. Strictly necessary cookies do not require consent under the Privacy and Electronic Communications Regulations (PECR). If we add analytics or marketing cookies in the future we will ask for your consent first.
We use industry-standard technical and organisational measures — including encryption in transit, role-based access controls and database-level access policies — to protect your personal data. No system is perfectly secure; if we become aware of a personal data breach affecting you we will notify you and the ICO where required by law.
We may update this policy from time to time. The "last updated" date above shows the most recent change. Material changes will be notified by email to active account holders.