Privacy Policy

1. Who we are

ProDough operates this website and is the data controller for the personal information you provide here. You can contact us at hello@prodough.co.ukabout anything in this policy, or to exercise any of your data rights.

2. What we collect and why

• Orders. When you place an order we collect your name, email address, phone number, delivery address and postcode. This is necessary to fulfil your order (performance of a contract) and to keep records for accounting.
• Payments. Card payments are processed by Stripe. We never see or store your full card details — Stripe handles the payment and provides us with a payment reference and your billing/shipping details as described above.
• Availability check. When you visit, we look up the country of your connection (via your IP address) to show whether we deliver to you. The result is kept only in your browser for the visit and the address itself is not stored. Legal basis: legitimate interests.
• Site usage. We do not run advertising or analytics trackers. The site itself uses only essential cookies and local storage (see section 4).
• Admin accounts. Sign-in details for our staff are managed by Supabase and used solely to access internal order and product management.

3. Who we share data with

We share data only with the processors needed to run the shop: Stripe (payments), Supabase (database hosting), and courier or hand-delivery staff who need your address to deliver your order. We never sell your data, and we do not use it for marketing without your separate consent.

4. Cookies

This site uses strictly necessary cookies only: a session cookie to keep shop staff signed into the admin area, and local storage on your device to remember your cart and your cookie-notice acknowledgement. Stripe may set its own essential cookies during checkout to process your payment securely. No consent is required for strictly necessary cookies; analytics or marketing cookies would only ever be set with your prior consent.

5. How long we keep data

Order records are kept for six years to meet HMRC accounting requirements, then deleted. Cart contents are stored only on your own device.

6. Your rights

You can ask us to access, correct, delete or restrict the personal data we hold about you, or have it transferred to you. Email hello@prodough.co.uk and we will respond within one month. See our GDPR page for more detail.

7. International transfers

Our data processors (Stripe, Supabase) may process data outside the UK/EU. Where that happens, transfers are protected by appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

8. Changes

If we change this policy, we will update the date above and, for significant changes, put a notice on this page before the change takes effect.

9. Complaints

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.