Privacy policy

Draft — last updated 24 October 2026.

Who we are

Kettle & Cart (trading name) is the data controller for personal data collected through this website. Operator: [to be confirmed]. Address: [to be confirmed]. Contact: hello@kettleandcart.co.uk.

What we collect and why

• Orders: when you check out we receive your name, email address, delivery address, phone number and what you ordered. We use this to process, deliver and support your order (lawful basis: contract), and keep order and payment records for as long as tax law requires, normally 6 years (legal obligation).
• Payments: payments are processed by Stripe on its secure checkout page. Stripe handles your card details and may use them for fraud prevention under its own privacy policy; we never see your full card number.
• Delivery: we share your name, delivery address, phone number and order details with our UK warehouse and fulfilment partners and their couriers, only so they can deliver your order.
• Emails to us: if you email us we use your message to reply (legitimate interests) and keep it for up to 2 years.

We don't sell your data and we don't send marketing emails unless you've asked us to.

Cookies and storage

This website uses no tracking or advertising cookies and no analytics. Your basket is saved only in your own browser using “local storage” so it's still there when you come back; it isn't sent to us until you check out, and you can clear it at any time by emptying the basket or clearing your browser data. This storage is strictly necessary for the basket to work. Stripe's checkout page may set its own cookies, which are needed for secure payment and fraud prevention.

Hosting

Our website is hosted by Netlify, which processes technical data such as IP addresses in server logs to deliver and secure the site.

International transfers

Some of our service providers (such as Stripe and Netlify) may process data outside the UK, including in the USA. Where they do, they use safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK–US data bridge.

Your rights

Under UK GDPR you can ask to access, correct or delete your personal data, restrict or object to how we use it, or receive a copy. Email hello@kettleandcart.co.uk. If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).