Privacy policy

Last updated: 28 October 2026

Who is responsible for your information

Gordon Humphreys trading as Gordon’s Honey Co is the controller of the personal information we use to run this business. Contact contact@gordonshoneyco.co.uk or write to Winifred Cottage, Whitchurch Road, Bangor-on-Dee, Wrexham, LL13 0AY.

What we collect and why

Orders and reservations: your name, contact and delivery details, order contents, payment status, order notes and correspondence. We use these to take and fulfil orders, arrange handovers, deal with returns and provide support. Our basis is performing our contract with you or taking steps you request before a contract.
Business and tax records: transaction records needed for accounting, tax, food traceability and legal duties. Our basis is legal obligation.
Enquiries and complaints: the details you provide so we can reply, resolve problems and maintain necessary records. We rely on steps towards a contract where relevant, or our legitimate interests in handling enquiries, resolving disputes and running the business.
Availability emails: your email address, the products you ask about and your consent record. We send the availability updates you request on the basis of consent. Buying or making an enquiry does not by itself subscribe you. Unsubscribe using the link in an email or contact Gordon.
Reviews: your submitted review, rating, chosen public name and any photographs, plus contact/order details needed to administer and check the review. Judge.me helps us collect and display reviews. We rely on our legitimate interests in providing genuine customer feedback and preventing misuse. Your email address is not intended to appear publicly with your review. Please avoid putting private details in review text or photos.
Website use and security: device, browser, IP address, cookie choices and information about how you use the store. Necessary security and fraud prevention support our legitimate interests in keeping the shop safe. Optional tracking and personalised advertising use consent where required.

We collect information directly from you and through Shopify, payment services and review services when you interact with the shop. If you do not provide the details necessary to process an order, we may not be able to complete or deliver it. Optional marketing consent is not required to buy.

Who receives information

We share relevant information with Shopify to host and operate the shop and checkout; payment providers to process payments and prevent fraud; Royal Mail or another agreed delivery provider to deliver and track parcels; Judge.me to administer reviews; and email, professional or legal service providers where needed to run the business. Authorities may receive information where the law requires it. Providers receive the information needed for their role, not unrestricted permission to use it for any purpose. We do not receive your full payment-card number or security code through the normal order record.

Shopify and its Enhanced Services

Shopify Network Intelligence is enabled for this store. Shopify may use information about your interactions with our store, other merchants and Shopify to improve services, personalise experiences, understand shopping activity and support more relevant advertising, subject to applicable consent choices. For some of these purposes Shopify acts as a controller itself. Read Shopify’s Consumer Privacy Policy and use Shopify’s privacy portal to learn about or exercise your rights directly with Shopify.

Cookies and videos

Essential cookies and similar storage keep features such as the basket, checkout, security and privacy choices working. Optional analytics, personalisation or advertising technologies are subject to the choices in the cookie banner where consent is required. You can reject optional uses and still shop.

Our Shopify cookie banner is enabled for UK visitors. You can revisit its choices through the cookie-preferences control where displayed, or clear this site’s cookies in your browser to see the banner again. Blocking all cookies can stop the basket and checkout working.

Embedded YouTube videos load when you choose to play them. Playing a video connects your device to Google/YouTube, which may receive your IP address and viewing information and use its own storage technologies. We use YouTube’s privacy-enhanced embed address. Its processing is explained in Google’s Privacy Policy. You can use the external YouTube link instead of the embedded player.

Processing outside the UK

Our providers, including Shopify and its service providers, may process information outside the UK, including in the EU and other countries. Our current Shopify hosting setting is the EU; this does not mean all processing stays there. Where transfer safeguards are required, these may include UK adequacy regulations or approved contractual safeguards such as the UK International Data Transfer Addendum. Contact us for information about relevant safeguards; Shopify also explains its arrangements in its privacy information.

How long we keep information

We keep records for as long as needed for the purpose, taking account of legal requirements, product traceability and potential claims. Self-employed tax records normally need to be kept for at least five years after the 31 January filing deadline for the relevant tax year. We retain related order records for that required period and longer only where a specific legal duty, unresolved dispute or claim justifies it.

Enquiries are kept while needed to respond and deal with related matters, then reviewed for deletion. Availability details are kept while the requested updates remain relevant and you stay subscribed. After an unsubscribe request we may retain a minimal suppression record to avoid emailing you again. Published reviews remain while relevant to the product unless removed following a justified request or moderation decision. Providers’ own privacy notices explain retention for data they control.

Your choices and rights

Depending on the circumstances, you can ask to access, correct or erase your information, restrict processing, receive a portable copy or object to uses based on legitimate interests. You can withdraw consent at any time without affecting earlier lawful processing, and object to direct marketing at any time. These rights have legal limits, including where we must retain tax records. We do not make solely automated decisions with legal or similarly significant effects about you; payment providers may use fraud-screening systems under their own notices.

Email Gordon to exercise your rights. We may need to verify your identity and normally respond within one month; we will explain if an extension is permitted and needed. Requests are normally free. You can also complain to the Information Commissioner’s Office.

We update this notice when our practices change. The date above identifies this version.