Privacy Policy

1. Introduction

elm-serval Ltd ("we", "our", or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website elm-serval.store or use our services.

We are registered in England and Wales and operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Personal Information You Provide

When you place an order or contact us, we may collect:

• Name and contact details (email address, delivery address)
• Dietary preferences and allergies
• Payment information (processed securely through third-party providers)
• Communications you send to us

Information Collected Automatically

When you browse our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website addresses
• Device information

3. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders
• Communicate with you about your orders and services
• Improve our website and services
• Send marketing communications (with your consent)
• Comply with legal obligations
• Prevent fraud and ensure security

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract: Processing necessary to fulfil our contract with you
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Where you have given explicit consent for specific purposes
• Legal Obligation: Processing necessary to comply with the law

5. Data Sharing and Disclosure

We may share your information with:

• Service providers who assist in order fulfilment and delivery
• Payment processors for secure transaction handling
• Professional advisors (accountants, lawyers) where necessary
• Law enforcement or regulatory bodies when required by law

We do not sell your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically, order information is retained for seven years for tax and accounting purposes.

7. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request restriction of processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us using the details below.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your information is primarily processed and stored within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.