Privacy Policy

Last updated: September 2026

Who We Are

Parkstone Fisheries Ltd (Company No. 07044249), 12 Bournemouth Road, Poole BH14 0ES, is the controller of the personal data described in this policy. Contact: info@parkstonefisheries.net.

What Data We Collect

When you place an order: your name, email address, phone number, delivery or collection address and postcode, your berth and vessel name if you order for delivery to a boat, and any notes you add to the order.
When you email or call us: your name, contact details and whatever you tell us in your message.
When you visit the website: your IP address and basic technical details about your browser, which our hosting provider records to run and secure the site. If you accept analytics cookies, Google Analytics also collects information about how you use the site.

We need your order details to take and fulfil your order. If you do not give them, we cannot process it.

How We Use Your Data, and Why We Are Allowed To

UK data protection law requires us to have a lawful basis for each use of your data. Ours are:

To take payment for, prepare and deliver your order, and to contact you about it. Basis: performing our contract with you.
To keep records of sales for tax and accounting. Basis: our legal obligations.
To answer your enquiries. Basis: our legitimate interest in responding to people who contact us.
To keep the website and payments secure, including preventing fraud and limiting repeated automated requests. Basis: our legitimate interest in protecting our business and our customers.
To understand how visitors use the website and improve it, using Google Analytics. Basis: your consent, which you can withdraw at any time.

We do not send marketing emails, we do not sell your data, and we do not make decisions about you by automated means.

Payment

Card payments are processed securely by Stripe, our payment provider. Your card details are entered directly with Stripe and are not stored on, or seen by, our servers. We receive only confirmation of payment and the limited transaction details needed to manage your order. Stripe processes your data under its own privacy policy.

Who We Share Your Data With

We share personal data only with the providers we rely on to run our service:

Stripe: card payment processing and fraud prevention. Your order details travel with the payment so that your order can be recorded.
Google: Google Workspace, which we use to record and manage orders; Google Analytics, only if you consent; and Google Maps, which shows our location on the contact page, only once you accept cookies or press "Show map".
Resend: sends your order confirmation and order update emails.
Microsoft: hosts our email, so it holds any email you send us.
Vercel: hosts the website and keeps short-lived server logs, which include IP addresses.
Upstash: briefly holds your IP address (for 60 seconds) to stop the order system being flooded with automated requests.

These providers act as our processors, handling data only on our instructions, or, where they use data for their own purposes (such as Stripe's fraud checks), as independent controllers under their own privacy policies.

Transfers Outside the UK

Some of these providers are based in, or process data in, the United States or the European Economic Area. Where your data leaves the UK, it is protected either by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, for certified providers) or by standard contractual clauses approved for UK transfers. Contact us for more information about the safeguard that applies to a particular provider.

Cookies

We use essential cookies and optional analytics cookies (Google Analytics 4). Analytics cookies are only loaded after you accept our cookie consent banner. See our cookie policy for details.

How Long We Keep It

Orders: 6 years, because tax law requires us to keep sales records.
Enquiries: 2 years, unless the conversation is ongoing.
Analytics data: no longer than 14 months.
IP addresses held for security: 60 seconds. Our host's server logs are deleted automatically after a short period.

Your Rights

Under UK GDPR you have the right to:

ask for a copy of the personal data we hold about you
have inaccurate data corrected
have your data deleted
ask us to restrict how we use your data
object to our using your data where we rely on legitimate interests
receive the data you gave us in a portable format, or have it sent to another organisation
withdraw your consent to analytics at any time, without affecting anything done before you withdrew it

Some of these rights are limited. For example, we cannot delete order records we are required by law to keep. To use any of them, email info@parkstonefisheries.net. We will reply within one month.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.