Privacy

What we hold

Your email address, because it is how you sign in and how we send order updates.

Any name, delivery address and phone number you give us for an order, and the billing address you give us if it differs.

Your order history, including what you bought and what you paid.

For wholesale accounts: your business details, tax licence number and the resale certificate you upload.

Notes we keep to serve you well, such as a delivery preference or an allergy you told us about. They are only seen by us, and are included if you ask for a copy of your data.

If you scan one of our printed QR codes, the time, your IP address, the country it places you in and the kind of device and browser you used, so we can see which codes are used. This is not linked to your account.

What we do not hold

We never see or store your card number. Payment details are captured by Square in your browser and go straight to them — they do not reach our server at any point.

We do not store a password, because there isn't one. Signing in uses a six-digit code sent to your email.

Who else is involved

Square processes card payments and holds the card data, under their own privacy terms.

A Zelle payment goes from your bank to ours; we see the sender's name and the memo, as any Zelle recipient does.

Proton carries our email, so the messages we send you pass through their servers.

Cloudflare provides the security check on our sign-in and wholesale forms, and sees the IP address of requests to this site.

Google Analytics tells us how many people visit and which pages they read. It sets its own cookies and reports to Google. It is not used on the admin pages, and we do not use it to advertise to you.

We do not sell your data, and we do not share it for advertising.

Cookies

Two are strictly functional: one keeps you signed in after you enter your code, and one remembers what is in your basket. Neither tracks you across other websites.

Google Analytics sets its own, used to count visits and see which pages are read. Your browser's "do not track" or an ad blocker will stop them, and nothing on this site stops working if you do.

How long we keep it

Your account, saved addresses and contact details are kept until you delete your account.

QR code scans are deleted after 12 months.

Order records are kept for as long as tax and food-traceability rules require — batch records in particular are what let us identify affected orders if a product has a problem.

Deleting your account

You can delete your account yourself at any time: sign in, open your account page and use "Delete your account" at the bottom.

That removes your name, email address, phone number, saved and billing addresses, any notes we kept about you, basket and sign-in codes straight away, and signs you out. It cannot be undone, but you are welcome to sign up again with the same email.

Your past orders stay on our books, because tax and food-traceability rules require us to keep sales and batch records. What we keep is what was bought, what it cost, when, which batch it came from, the tracking number, and the city, state and ZIP code it went to — not your name, street address or phone number.

An account cannot be deleted while one of its orders is still on its way. Wait until it has arrived, or write to us to cancel it first.

Wholesale accounts are closed on request by email rather than from the account page, because we are required to keep invoices and resale certificates. We remove the people named on the account and keep the business record.

Payment records are held by Square under their own privacy terms. Deleting your account here does not delete them.

Getting in touch

Write to [email protected] for a copy of your data or a correction, or if you would rather we delete your account for you.