Privacy Policy
Last updated: 28 July 2026
1. Introduction
Flavour Express (“we”, “us”, “our”) operates the website flavourexpress.com and is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.
This Privacy Policy explains how we collect, use, store, share and protect your personal data when you visit our website, create an account, place an order, contact us, or otherwise interact with us.
Controller details Flavour Express. Unit 19 Dalweb Industrial Estate Banks, Southport Merseyside PR9 8DE United Kingdom
Email: support@flavourexpress.com Telephone: 01704 222 999
2. What personal data we collect
We may collect and process the following categories of personal data:
• Identity data: name, title • Contact data: billing/shipping address, email address, telephone number • Account data: username, password (stored hashed), order history, preferences • Transaction data: products purchased, payment amounts, payment method details (we do not store full card numbers) • Technical data: IP address, browser type and version, device information, time zone, operating system, referral source • Usage data: pages visited, products viewed, time spent on site, clickstream data • Marketing and communications data: your preferences for receiving marketing from us and your communication preferences • Correspondence data: records of emails, phone calls or messages you send us
We do not intentionally collect special-category (sensitive) data.
3. How we collect your data
• Directly from you when you register, place an order, fill in forms, subscribe to newsletters, or contact us. • Automatically via cookies, server logs and similar technologies when you browse the site. • From third parties such as payment providers, delivery companies, and (where applicable) social media platforms if you interact with our pages.
4. Lawful bases for processing
We process your personal data only where we have a lawful basis under UK GDPR:
• Contract – to process and fulfil your orders, manage your account, and provide customer service. • Legitimate interests – to improve our website and products, prevent fraud, analyse usage, and (where appropriate) send marketing to existing customers (you can opt out at any time). • Consent – for non-essential cookies, email marketing to new subscribers, and certain other optional processing. You may withdraw consent at any time. • Legal obligation – to comply with tax, accounting, consumer-protection and other legal requirements.
5. How we use your data
We use your personal data to:
• Process and deliver orders • Manage your customer account • Communicate with you about orders, enquiries and support • Send marketing communications (only where permitted) • Improve our website, products and services • Detect and prevent fraud and abuse • Comply with legal and regulatory obligations • Analyse website performance and user behaviour (in aggregated or anonymised form where possible)
6. Sharing your data
We share personal data only when necessary and with appropriate safeguards:
• Payment processors (e.g. card acquirers, Stripe or equivalent) • Shipping and logistics providers • IT and hosting providers, email service providers, and analytics tools • Professional advisers (accountants, lawyers) • Law-enforcement or regulatory authorities when required by law
We do not sell your personal data. All third-party processors are required to process data only on our instructions and to implement appropriate security measures.
7. International transfers
Some of our service providers may process data outside the UK/EEA. Where this occurs we ensure appropriate safeguards are in place (UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions).
8. Data retention
We retain personal data only for as long as necessary for the purposes set out in this policy:
• Order and transaction data: typically 6–7 years (for tax and accounting purposes) • Account data: while your account remains active and for a reasonable period afterwards • Marketing preferences and consent records: until you withdraw consent or unsubscribe • Technical and analytics logs: usually for a shorter period (e.g. 12–26 months)
When data is no longer required we securely delete or anonymise it.
9. Your rights under UK GDPR
You have the following rights:
• Access – request a copy of the personal data we hold about you • Rectification – correct inaccurate or incomplete data • Erasure (“right to be forgotten”) – request deletion in certain circumstances • Restriction – request that we limit processing in certain cases • Data portability – receive your data in a structured, commonly used format • Object – object to processing based on legitimate interests or to direct marketing • Withdraw consent – where processing is based on consent
To exercise any of these rights, please email support@flavourexpress.com or write to the address above. We will respond within one month (or as required by law).
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): Website: ico.org.uk Telephone: 0303 123 1113
10. Cookies and similar technologies
Our website uses cookies and similar technologies. Essential cookies are required for the site to function. Non-essential cookies (analytics, marketing, preference) are used only with your consent where required.
You can manage cookie preferences via the cookie banner on our site or through your browser settings.
11. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration. These include encryption in transit (HTTPS), access controls, and regular security reviews. No method of transmission over the internet is completely secure, but we work to maintain a high level of protection.
12. Children’s privacy
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised and, where changes are significant, we will provide additional notice (e.g. via email or a notice on the website).
14. Contact us
If you have any questions about this Privacy Policy or our data-protection practices, please contact:
Flavour Express Ltd. Unit 19 Dalweb Industrial Estate Banks, Southport Merseyside PR9 8DE
Email: support@flavourexpress.com Telephone: 01704 222 999 (Mon–Fri 9:30am–5:30pm)