Privacy & Cookie Policy
Last updated: 8 October 2026
This policy explains how Forage Mushrooms Ltd ("Forage", "we", "us") collects and uses your personal data when you visit foragemushrooms.co.uk, buy from us, sign up to our emails or contact us. We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Forage Mushrooms Ltd, trading as Forage Mushrooms
Registered in England and Wales, company number 16843885
Registered office and farm: Unit 1A, Windmill Industrial Estate, Fowey, Cornwall PL23 1HB
VAT number: GB 513 4306 30
Email: hello@foragemushrooms.co.uk
2. The data we collect
- Identity and contact details – name, email address, phone number, billing and delivery addresses.
- Order details – what you bought, when, how much you paid and delivery instructions.
- Payment details – payments are processed by our payment providers. We never see or store your full card number.
- Account details – if you create an account: login details and order history.
- Communications – messages you send us by email, our contact form or social media, and trade enquiry details (business name, requirements).
- Marketing preferences – whether you have asked to receive our emails.
- Technical and usage data – IP address, device and browser type, pages viewed and how you use the site, collected through cookies and similar technologies (see section 9).
3. How we use your data and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Taking and delivering your order, taking payment, sending order and delivery updates | Performance of a contract |
| Handling queries, complaints, refunds and replacements | Performance of a contract; legitimate interests (providing good customer service) |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping our website secure | Legitimate interests |
| Sending marketing emails ("mushroom mail") | Consent – or, if you have bought from us, our legitimate interest in telling you about similar products (you can opt out at checkout and in every email) |
| Responding to trade and wholesale enquiries | Legitimate interests (developing our business); steps before entering a contract |
| Analytics and marketing cookies | Consent |
4. Who we share your data with
We only share personal data where needed to run our business, and never sell it. Recipients include:
- Shopify – our e-commerce platform, which hosts our website and processes orders and payments on our behalf (Shopify privacy policy).
- Payment providers – such as Shopify Payments, PayPal, Apple Pay or Google Pay, depending on how you choose to pay.
- DPD – our delivery partner receives your name, delivery address, email and phone number so they can deliver your order and send you delivery updates.
- Shopify Email – sends our newsletter if you have signed up (part of Shopify).
- Professional advisers – such as our accountants, where needed.
- Authorities – HMRC, the police or regulators where the law requires it.
5. International transfers
Some of our service providers (including Shopify) may process data outside the UK, for example in Canada, Ireland or the USA. Where this happens, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to protect your data.
6. How long we keep your data
- Order and accounting records – 6 years from the end of the financial year they relate to, as required by HMRC.
- Customer accounts – until you close your account, then as above for order records.
- Marketing list – until you unsubscribe. We keep a record of the unsubscribe so we don't email you again.
- Enquiries and correspondence – up to 2 years after our last contact, unless they become part of an order.
- Cookies – for the periods set out in the cookie information below.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, in certain circumstances;
- restrict or object to our use of your data – including an absolute right to object to direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email hello@foragemushrooms.co.uk. There is normally no charge and we will reply within one month. You can unsubscribe from our emails at any time using the link in every email.
8. Complaints
Please contact us first and we will do our best to help. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
9. Cookies
Cookies are small files stored on your device. We use:
- Strictly necessary cookies – needed for the shop to work, for example to remember your basket, keep checkout secure and remember your cookie choices. These do not need consent.
- Analytics cookies – Shopify's built-in analytics help us understand how visitors use the site so we can improve it. Only used if you accept them.
- Marketing cookies – used to measure and personalise advertising. We don't currently use any advertising trackers; if we add them, they will only be used if you accept them and we will update this policy.
When you first visit, our cookie banner asks for your choice. You can change it at any time using the Cookie preferences link at the bottom of every page, or by clearing cookies in your browser. A full list of the cookies used by our Shopify store is available in Shopify's cookie policy.
10. Children
Our website is not aimed at children and we do not knowingly collect data from anyone under 13.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.