Privacy Policy

Miss Maple (“we”, “us”) is the controller of the personal data described on this page. We’re [registered business name and company number], of [registered address].

When you make an account, we collect:

• Your name, email address and password (the password is never visible to us — it’s handled by our authentication provider).
• A phone number and an address, if you give them — both optional, kept as contact details rather than for delivery, since we don’t deliver.
• Whether you’d like to hear from us by email — unticked unless you tick it yourself.

When you place an order, we additionally collect:

• The name on the account is what the order is placed under — we don’t ask you to type it again — and the email address it was placed with.
• What you ordered, for which restock, and its status as it moves from placed to collected.

If you’ve spoken to us at the counter, staff may add a short note to your record — for example an allergy worth remembering. This never happens automatically from the website.

Before you place an order, your basket — what you’ve chosen and how many — is kept in your browser’s own storage on your device. We don’t see it or store it ourselves until you actually place the order.

We don’t take payment through the website, so we never see your card details. And while there’s a place on your account to say you’d like to hear from us, we don’t currently send marketing of any kind — recording your answer is the only thing it does today. You can change it any time from your account, or turn it off without one on the unsubscribe page.

• To take and fulfil your order, and to let you know when it’s ready.
• To identify you when you collect, and to answer questions about an order when you get in touch.
• To keep records for accounting and food safety purposes.
• To keep the site itself working and secure.

We don’t sell your data. It’s shared only with the services that help us run the site and take orders:

• Supabase, who host our database and handle sign-in.
• Resend, who deliver the order and account emails we send.
• Vercel, who host the site and provide basic, privacy-focused analytics on how it’s used.

We keep order records for as long as we need them for accounting and food safety purposes. If you close your account, we keep the record of what you ordered — orders are part of our own business records — but remove the personal details tying it to you where we’re able to.

We use your browser’s own storage to keep you signed in and to hold your basket between visits — nothing here tracks you across other sites. Vercel Analytics may collect anonymised, aggregate information about how the site is used, to help us understand what’s working; it doesn’t use tracking cookies or identify you individually.

Under UK data protection law, you can ask us to confirm what we hold about you, correct it, or delete it — deleting your account removes the link to your order history without deleting the orders themselves, for the accounting reasons above. Get in touch at [contact email] to ask about any of this.

If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

We may update this policy as the site changes. Significant changes will be reflected here with an updated date at the top of the page.

Questions about this policy or your data can go to [contact email] or [contact phone number].