Privacy policy

Version 0.1 — effective [Legal docs effective date] La Ranche, [Business address], is the data controller. Contact: [email protected].

What we collect and why

• Account and order data (name, email, delivery address, phone, order history): to fulfil your orders and provide your account. Legal basis: performance of a contract.
• Payment data: handled by our payment processor Stripe; we never see or store full card numbers. Legal basis: contract.
• Waitlist and marketing emails: only if you opt in. Legal basis: consent. Every marketing email includes an unsubscribe link; transactional emails about your orders are sent regardless, as they are part of the service.
• Basic site analytics, where used, to understand site usage. Legal basis: legitimate interest / consent per cookie banner.

Where it lives

Data is stored on [Hosting provider] servers and processed by: Stripe (payments), Resend (email), [Courier] (delivery — they receive only name, address, phone). We do not sell or share your data with anyone else.

How long we keep it

Order records: 6 years (tax and food-traceability requirements). Waitlist entries: until you unsubscribe or 2 years of inactivity. Account data: until you ask us to delete it.

Your rights

Access, correction, deletion, portability, objection, and withdrawal of consent — email [email protected] and we will act within one month. Deletion requests anonymise order records we must legally retain. You can complain to the ICO (ico.org.uk) if unhappy with our answer.

Cookies

We use essential cookies for login and cart, and analytics cookies only with your consent via the banner.