Privacy Policy

Privacy Policy for Sullivans Greengrocers

Effective Date: 22nd July 2026

At Sullivans, we are committed to safeguarding your personal information and ensuring transparency about how we collect and use your data. This Privacy Policy outlines how we handle your personal data when you use our website or services.

Sullivans Greengrocers is the data controller responsible for your personal information. If you have any questions about this Privacy Policy or how your personal data is handled, please contact us using the details below.

SULLIVANS CATERING BESSEMER MARKET LTD
t/a Sullivans Greengrocers
Cardiff Market
St Mary Street
Cardiff
CF10 1AU

Email: contact@cardiffgreengrocer.com

1. Personal Data We Collect

We collect the following personal data:

Name
Email address
Billing and shipping address
Phone number
Order history
Communications with us, including emails and contact form enquiries
Payment information

We process payments securely via PayPal and Stripe. Sullivans does not store your payment details directly.

2. How We Use Your Personal Data

We use your personal data to:

Process and deliver orders
Provide customer support
Send newsletters and updates
Manage subscriptions
Deliver our services effectively
With your consent, send marketing emails
With your consent, use advertising technologies such as the Meta Pixel and Google Analytics to measure the effectiveness of our advertising and improve our services

3. Legal Basis for Processing Personal Data

We only process your personal data where we have a lawful basis to do so under the UK GDPR.

Purpose	Legal Basis
Processing and delivering your orders	Performance of a contract
Managing your customer account and subscriptions	Performance of a contract
Responding to enquiries and providing customer support	Legitimate interests
Sending marketing emails	Consent
Measuring website usage using analytics cookies	Consent, where required
Improving our website and services	Legitimate interests
Meeting our legal, accounting and tax obligations	Legal obligation

4. Third-Party Sharing

To provide our services, we may share your personal data with trusted third-party service providers where necessary, including:

Shopify – to host and operate our online store.
Payment providers, including Stripe and PayPal – to securely process payments.
Delivery providers – to fulfil and deliver your orders.
Email marketing providers, such as Brevo – to send newsletters and marketing communications where you have given your consent.
Analytics and advertising providers, including Google services such as Google Analytics and Meta services such as Meta Pixel – to help us understand website usage, measure the effectiveness of our advertising and improve our services.

We only share the information necessary for these providers to perform their services on our behalf. Where required, our third-party providers are contractually required to protect your personal data and process it in accordance with applicable data protection laws.

5. Marketing Preferences and Consent

Where we rely on your consent, such as for marketing emails or non-essential cookies, you may withdraw your consent at any time.

You can unsubscribe from marketing emails by clicking the Unsubscribe link in any marketing email or by contacting us at contact@cardiffgreengrocer.com.

Processing your personal data to fulfil your orders or provide customer support does not rely on consent, as it is necessary to perform our contract with you or comply with our legal obligations.

6. Data Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, disclosure or alteration. However, no method of transmitting or storing information electronically is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access – Request a copy of the personal data we hold about you.
Right to rectification – Request that inaccurate or incomplete personal data is corrected.
Right to erasure – Request that we delete your personal data where there is no legal reason for us to continue processing it.
Right to restrict processing – Request that we temporarily limit how we use your personal data in certain circumstances.
Right to object – Object to us processing your personal data where we rely on legitimate interests or use your data for direct marketing.
Right to data portability – Request that we provide your personal data in a commonly used electronic format where applicable.
Right to withdraw consent – Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before your consent was withdrawn.

To exercise any of these rights, please contact us at contact@cardiffgreengrocer.com.

Complaints

If you believe your personal data has not been handled correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We would appreciate the opportunity to resolve your concerns before you raise your concerns with the ICO.

If we experience a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO and affected individuals where required by law.

8. Cookies

Our website uses cookies to improve your browsing experience, understand how visitors use our website and help us improve our services. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

Necessary Cookies

These are essential for the website to function correctly. They enable features such as shopping baskets, secure logins, checkout, payment processing and remembering your cookie preferences. These cookies cannot be switched off.

Analytics Cookies

These help us understand how visitors use our website by collecting information about page views, visitor numbers and user journeys. We may use services such as Google Analytics to help improve the performance and usability of our website.

Advertising Cookies

These help us measure the effectiveness of our advertising and show more relevant adverts. We may use technologies such as the Meta Pixel to understand how visitors interact with our website after viewing or clicking our advertisements.

Where required by law, we will only use analytics and advertising cookies after you have given your consent. You can accept, reject or change your cookie preferences at any time using our cookie banner or your browser settings.

9. International Data Transfers

Some of our service providers may process personal data outside the UK. Where this happens, appropriate safeguards are in place, such as the UK International Data Transfer Agreement or other approved transfer mechanisms.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting and tax obligations. We will securely delete or anonymise personal data when it is no longer required.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with an updated effective date.

Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, please contact: