Symi's Smoked Meat

Legal & Compliance

Privacy Policy

Last updated: 29 October 2026

This policy explains what personal data Symi’s Smoked Meat collects, how we use it, and your rights under UK GDPR and the Data Protection Act 2018. Questions? Email [email protected].

1. Who We Are

Symi’s Smoked Meat Ltd is the data controller for your personal data.

Legal entity
Symi’s Smoked Meat Ltd
Company No.
17204962
ICO Ref.
C1927833
Registered address
20 Wenlock Road, London, N1 7GU
Contact email
[email protected]

2. What We Collect

  • Order and account data: your name, delivery address, email address, phone number (if provided) and order history.
  • Payment data: handled by our PCI-DSS compliant payment provider. We never see or store your full card details.
  • Website data: IP address, browser and device type, pages visited and how you arrived at our site.
  • Communications: records of emails or messages you send us.
  • Marketing preferences: whether you have opted in to marketing emails, and when.

We need your name, delivery address and email address to fulfil an order. Without them, we cannot process it.

3. How We Use Your Data

  • Contract: to process, fulfil and deliver your orders, and handle returns or complaints.
  • Legal obligation: to keep tax and accounting records and meet our obligations as a registered food business.
  • Legitimate interests: to prevent fraud, keep our website secure, improve our products and service, run promotions you enter, and ask for a review after delivery. You can opt out of review requests at any time.
  • Consent: to send marketing emails, where you opt in at checkout, and to use analytics and advertising cookies, where you accept them. You can withdraw consent at any time.

We do not make decisions about you based solely on automated processing.

4. Who We Share It With

We never sell your personal data. We share it only where needed to run our business.

  • Service providers: companies acting on our behalf under data processing agreements, including our e-commerce, payment, hosting, security, database, email and order management providers.
  • Fulfilment and delivery partners: who receive your name, address and order details to prepare and deliver your order.
  • Google: for website analytics, where you have accepted cookies.
  • Meta Platforms Ireland Ltd: for advertising measurement and targeting, where you have accepted cookies. Meta acts as an independent controller. See its privacy policy at facebook.com/privacy/policy.

Some providers process data outside the UK. Where they do, it is protected by safeguards approved under UK GDPR, such as the UK International Data Transfer Agreement or the UK extension to the EU-US Data Privacy Framework.

5. Cookies

  • Essential: keep the site working, including your basket, checkout and cookie choice. Always on.
  • Analytics: Google Analytics, to understand how our site is used. Only with your consent.
  • Advertising: the Meta Pixel and Conversions API, to measure our ads and show relevant ads on Facebook and Instagram. These collect pages visited, products viewed, basket additions, searches, purchases (including order value and your email and phone number in hashed form), IP address and browser details. Only with your consent.

You can change your choice at any time using Cookie settings in our footer.

6. Promotions

If you enter a promotion, such as a prize draw, we use your order details to confirm eligibility, select and contact the winner, and apply the prize. We will not publish a winner’s full name without their permission. Entry data is kept for 12 months after the promotion closes, unless needed longer for accounting.

7. How Long We Keep It

  • Order records: 7 years, as required by HMRC.
  • Customer accounts: until you close your account or ask us to delete it.
  • Marketing preferences: until you unsubscribe or ask us to delete them.
  • Correspondence: 2 years from last contact.
  • Analytics data: up to 14 months.
  • Advertising data: held by Meta in line with its own privacy policy.

8. Your Rights

  • Access: request a copy of the data we hold about you.
  • Correction: ask us to fix inaccurate or incomplete data.
  • Erasure: ask us to delete your data.
  • Restriction: ask us to pause processing.
  • Portability: receive your data in a machine-readable format.
  • Objection: object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: at any time, without affecting earlier lawful processing.

Email [email protected]. We will respond within one month and may need to verify your identity first.

9. Security

We protect your data with appropriate technical and organisational measures, including encryption in transit, PCI-DSS compliant payments and strict access controls. If a breach is likely to put your rights at risk, we will notify the ICO within 72 hours and inform you where required.

10. Children

Our website and products are not aimed at children under 16. Promotions are open to UK residents aged 18 and over. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes and Complaints

We may update this policy from time to time. The date at the top shows the latest version.

If you have a concern, contact us first at [email protected]. You can also complain to the Information Commissioner’s Office:

This page does not constitute legal advice. If you have a specific data protection concern, please seek independent legal guidance. Symi’s Smoked Meat is registered in England and Wales.