Last updated: June 2026
1. Who we are
Tastebound is a food and travel magazine published bi-monthly and available in print via our website at tastebound.co.uk, as well as through retailers including Waitrose, WH Smith, and selected independents.
For the purposes of UK data protection law, the data controller is Tastebound. You can contact us at [email protected].
2. What information we collect
We may collect and process the following personal data:
Identity and contact data — your name, email address, and delivery address when you place an order or sign up to our newsletter
Transaction data — details of purchases you make through our website, including payment information (processed securely via Shopify and our payment providers — we do not store full card details)
Communications data — messages you send us via email or social media
Technical data — your IP address, browser type, device information, and website usage data collected via cookies and analytics tools
3. How we use your information
We use your personal data for the following purposes:
PurposeLawful basisProcessing and fulfilling your ordersPerformance of a contractSending order confirmations and delivery updatesPerformance of a contractSending our newsletter and editorial updates (where you’ve opted in)ConsentResponding to your enquiriesLegitimate interestsImproving our website and understanding how visitors use itLegitimate interestsComplying with legal and financial obligationsLegal obligation
We will never sell your personal data to third parties.
4. Marketing communications
If you subscribe to our email newsletter, we’ll send you editorial features, new issue alerts, and other content we think you’ll enjoy. You can unsubscribe at any time using the link in any email we send, or by emailing us at [email protected].
We do not send marketing emails to customers who have not opted in.
5. Sharing your data
We share your data only where necessary:
Shopify — our ecommerce platform, which processes orders and stores customer data on our behalf. Shopify is certified under applicable data protection frameworks. See Shopify’s privacy policy at shopify.com/legal/privacy.
Payment providers — including PayPal, Stripe, and others listed at checkout. These providers process payment data under their own privacy policies.
Delivery and fulfilment partners — your name and delivery address are shared with our fulfilment partner(s) in order to dispatch your order.
Analytics services — anonymised usage data may be shared with tools such as Google Analytics to help us understand site performance.
Legal and regulatory bodies — where we are required to do so by law.
All third parties we work with are required to handle your data securely and in accordance with applicable data protection legislation.
6. International transfers
Some of our third-party service providers operate outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in line with UK GDPR requirements, such as standard contractual clauses or adequacy decisions.
7. Data retention
We retain your personal data only for as long as necessary:
Order and transaction records are kept for up to 7 years to meet HMRC requirements
Newsletter subscriber data is held until you unsubscribe
Enquiry correspondence is kept for up to 2 years
Website analytics data is retained in line with our analytics provider’s default settings
8. Your rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Rectify any inaccurate or incomplete data
Erase your data (the “right to be forgotten”), subject to legal exceptions
Restrict the processing of your data in certain circumstances
Object to processing based on legitimate interests
Data portability — receive your data in a structured, commonly used format
Withdraw consent at any time where processing is based on consent (e.g. newsletter)
To exercise any of these rights, please email [email protected]. We will respond within one calendar month.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Cookies
Our website uses cookies to provide essential functionality (such as your shopping cart) and to understand how visitors use the site. You can manage your cookie preferences via the cookie banner when you first visit, or through your browser settings.
For full details, please see our Cookie Policy [link if separate policy exists, or expand this section].
10. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is hosted on Shopify, which maintains industry-standard security practices including SSL encryption.
11. Children
Our website and magazine are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
12. Changes to this policy
We may update this policy from time to time. The current version will always be available at tastebound.co.uk/policies/privacy-policy. We’ll notify newsletter subscribers of any material changes.
13. Contact us
Tastebound
Email: [email protected]
Website: tastebound.co.uk