Privacy Policy

1. Introduction

2. The Data We Collect

We collect only the information we need to operate our membership service and deliver your benefits.

Personal data you provide

• Email address — used for account access, subscription management, and member communications.

• Postal address — required to send your free member gift and any future physical items.

• Payment information — processed securely by our payment provider; we do not store card details.

• Name — used for account identification and postage.

• Any voluntary information you provide when contacting us.

Automatically collected data

When you visit our website, we may collect:

• IP address

• Device and browser information

• Basic analytics data (e.g., pages visited, time on site)

This helps us maintain website security and improve user experience.

3. How We Use Your Data

We use your personal data for the following purposes:

• To manage your Garlic & Pearls membership

• To send your free member gift

• To communicate with you about episodes, updates, and member content

• To process payments and maintain your subscription

• To comply with legal obligations, including tax and accounting requirements

• To improve our website and services

We do not sell your data, and we do not use it for unrelated marketing.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contractual necessity — to provide your paid membership and deliver your gift

• Consent — for optional email communications beyond essential membership updates

• Legal obligation — for accounting, tax, and regulatory compliance

• Legitimate interests — to improve our website and protect against fraud

5. Sharing Your Data

We only share your data with trusted third parties when necessary:

• Payment processors (e.g., Stripe, PayPal)

• Email service providers used for member communications

• Postal or courier services to deliver your gift

• Website hosting and analytics providers

• Professional advisers (e.g., accountants) when legally required

All third parties are required to handle your data securely and in compliance with UK GDPR.

6. International Transfers

Some service providers may store data outside the UK. When this happens, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations

• Standard Contractual Clauses (SCCs)

• ICO‑approved mechanisms

7. Data Retention

We keep your personal data only for as long as necessary:

• Membership data: retained while your subscription is active

• Postal address: retained only while needed for gift fulfilment

• Financial records: retained for 6 years to comply with UK tax law

• Email communications: retained until you unsubscribe or request deletion

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate data

• Delete your data (in certain circumstances)

• Restrict processing

• Object to processing

• Port your data to another provider

• Withdraw consent at any time

To exercise any of these rights, contact us at: [Insert email]

9. Security

We take appropriate technical and organisational measures to protect your data, including:

• Encrypted storage

• Secure access controls

• Regular security reviews

• Use of reputable third‑party processors

10. Cookies

Our website uses cookies for essential functionality and analytics. You can manage cookies through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

12. Contact Us