Privacy & Cookie Policy
Last updated: 10 September 2026
This Privacy & Cookie Policy explains how Bristol Pie Society (“Bristol Pie Society”, “we”, “us” or “our”) collects, uses and protects personal information when you visit our website, place an order, join our mailing list, contact us or book our catering or event services.
Bristol Pie Society operates from:
The Gloucester Old Spot
138–140 Kellaway Avenue
Bristol
BS6 7YQ
United Kingdom
Website: bristolpiesociety.co.uk
For the purposes of UK data protection law, Bristol Pie Society is the controller of the personal information described in this policy.
We process personal information in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”) and the Data (Use and Access) Act 2025.
1. Personal information we collect
Depending on how you interact with us, we may collect:
Identity and contact information including your name, email address, telephone number, billing address and delivery address.
Order and transaction information including products ordered, order value, delivery or collection information, refunds, payment status and related correspondence.
Business and event information where you contact us about catering, weddings, workplace catering, private events or wholesale supply. This may include your organisation name, invoicing details, event information and contact details for people involved in arranging the booking.
Marketing information including whether you have chosen to receive emails from Bristol Pie Society and details of when and how you subscribed or unsubscribed.
Technical and website information including information such as your IP address, browser type, device type, operating system, pages viewed, referring website and information about how you interact with our website.
Correspondence including messages, enquiries, complaints, reviews or other communications you send to us.
Dietary and allergy information where this is necessary for an order, catering booking or event. In some circumstances this information may reveal health information, religious beliefs or other information that receives additional protection under data protection law.
We do not normally receive or store your full debit or credit card details. Payment information is processed securely by the payment provider used at checkout.
2. How we collect your information
We collect personal information directly from you when you place an order, complete a form, join our mailing list, contact us, make a catering or event enquiry or otherwise communicate with us.
We may also receive information automatically when you use our website through cookies and similar technologies.
In some circumstances we may receive information from third parties, for example payment providers, delivery companies, event organisers or another person arranging an event on your behalf.
If you give us personal information relating to another person, for example a guest's dietary requirement or contact details, you should make sure that you are entitled to provide that information to us.
3. How and why we use your personal information
We only use personal information where we have a lawful reason to do so.
Fulfilling our contract with you
We use personal information where necessary to provide products or services you have requested. This includes processing orders, arranging collection or delivery, taking payments, issuing refunds, responding to questions about an order and providing catering or event services.
Our lawful basis for this processing is that it is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legal and regulatory obligations
We may process and retain information where necessary to comply with legal obligations, including accounting, taxation, food safety, fraud prevention and responding to lawful requests from regulators or authorities.
Our lawful basis is compliance with a legal obligation.
Running and protecting our business
We may use information where necessary for our legitimate business interests, including administering our website, keeping our systems secure, preventing fraud, dealing with complaints, improving our services and understanding the performance of our business.
We only rely on legitimate interests where our interests are not overridden by your rights and interests.
Marketing
Where you actively join our mailing list, we use your email address to send Bristol Pie Society news, new pie releases, order-drop reminders, events and other relevant updates.
Where required, we rely on your consent. You can withdraw your consent or unsubscribe at any time by using the unsubscribe link included in our marketing emails.
In limited circumstances UK electronic marketing rules may allow us to contact existing customers about similar products or services where we gave them an opportunity to opt out when their details were collected and continue to provide an opt-out in every marketing message.
We will not sell your personal information or share your contact details with another organisation for that organisation's own marketing purposes.
4. Dietary requirements and special category information
If you tell us about allergies, medical dietary requirements or information which may reveal religious or other protected information, we only use that information where it is necessary to safely provide the food or service you have requested.
Where the information constitutes “special category data” under UK data protection law, we will ensure that an additional legal condition for processing it applies. Where appropriate, this may include your explicit consent.
We will only collect the information reasonably necessary for the purpose and will not use it for marketing or unrelated purposes.
5. Catering, weddings, events and wholesale customers
If you contact Bristol Pie Society regarding workplace catering, weddings, parties, events or wholesale supply, we may process the contact and business information required to prepare quotations, organise your booking, supply products, arrange delivery and issue invoices.
Where an organiser supplies information about guests or attendees, we will use that information only so far as reasonably necessary to deliver the relevant service.
6. Who we share your information with
We may share personal information with trusted organisations that help us provide our services. These may include our website and e-commerce provider, payment providers, delivery and courier companies, email service providers, IT and technology providers, accountants, professional advisers and other suppliers involved in fulfilling an order or booking.
We may also disclose information to HM Revenue & Customs, regulators, law-enforcement bodies, courts or other authorities where we are legally required to do so or where disclosure is necessary to establish, exercise or defend legal claims.
Where another organisation processes personal information on our behalf, we require it to protect that information appropriately and only use it for the agreed purpose.
7. Squarespace
Our website is hosted and operated using Squarespace.
Squarespace provides website hosting, e-commerce, forms, analytics and other technology used to operate the Bristol Pie Society website.
Information submitted through our website may therefore be processed and stored using Squarespace's systems.
Squarespace may process information in countries outside the United Kingdom, including the United States. Where UK personal information is transferred internationally, appropriate lawful transfer mechanisms and safeguards are used where required.
For more information about how Squarespace handles information, please refer to Squarespace's own Privacy Policy.
8. Payments
Payments made through our website are processed using the payment solution connected to our Squarespace store, such as Squarespace Payments or another supported payment provider.
The payment provider may collect information including your name, billing details, payment information, IP address and information required to verify and securely process the transaction.
Payment providers may also use information to prevent fraud, comply with financial regulations, process refunds and manage disputes.
Bristol Pie Society does not normally receive or store your complete card number or card security code.
The payment provider's own privacy terms also apply to its processing of your payment information.
9. International transfers
Some of the organisations that provide services to us may process personal information outside the United Kingdom.
Where UK data protection law requires safeguards for an international transfer, we take reasonable steps to ensure an appropriate mechanism is in place. Depending on the destination and provider, this may include UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or the UK Addendum to approved Standard Contractual Clauses.
10. How long we keep your information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting and reporting requirements.
Order, invoice, VAT and other accounting information will normally be retained for at least six years where this is necessary to meet applicable tax and accounting requirements.
General enquiries and correspondence are retained only for as long as reasonably necessary to deal with the enquiry or protect our legitimate business interests.
Marketing information is retained while you remain subscribed. If you unsubscribe, we may retain a limited record of your email address and opt-out request so that we can ensure we respect your preference.
Information connected with a complaint, dispute or legal claim may be retained for longer where reasonably necessary.
11. Keeping your information secure
We take reasonable technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Cookies
12. What are cookies?
Cookies are small files or pieces of information stored on your computer, smartphone or other device when you visit a website.
Cookies and similar technologies can be used to make a website work, remember settings, maintain a shopping basket, protect against fraud and understand how visitors use a website.
UK rules governing cookies and similar technologies are primarily contained in PECR.
13. Cookies used on our website
Because our website is hosted by Squarespace, Squarespace may place cookies or use similar technologies when you visit the site.
The exact cookies used can vary depending on which features of the website you use and which Squarespace services or integrations are enabled.
Necessary cookies
Necessary cookies are used for functions such as website security, checkout, shopping baskets, customer accounts and remembering privacy choices.
Examples of Squarespace cookies that may be used on our site include:
CART – identifies when products have been added to a shopping basket. It may remain for up to two weeks.
hasCart – tells the website that a visitor has a shopping basket. It may remain for up to two weeks.
Crumb – helps prevent cross-site request forgery and is normally a session cookie.
CHECKOUT_WEBSITE – helps identify the correct website during checkout and is normally used for the duration of the session.
ss_performancecookiesAllowed and ss_marketingcookiesAllowed – remember cookie preferences selected through the Squarespace cookie controls and may remain for approximately 30 days.
Cookies that are strictly necessary to provide a service you have requested do not require consent under PECR.
14. Analytics and performance cookies
Squarespace may use analytics and performance technologies to help us understand how people use our website.
Depending on our Squarespace configuration, these may include cookies such as ss_cid, ss_cpvisit, ss_cvisit, ss_cvr and ss_cvt.
These can help provide information such as visitor numbers, pages viewed, traffic sources and how visitors move around the website.
Where the limited statistical-purpose exception under PECR applies, analytics may be used without prior consent provided that the legal requirements for that exception are satisfied, including providing clear information and an easy and free means of objecting.
Where that exception does not apply, analytics or performance cookies will only be used where the appropriate consent has been obtained.
15. Functional and preference technologies
Certain technologies may remember choices or improve the way the website appears or functions on your device.
Some of these may fall within exemptions permitted by PECR where their sole purpose is to adapt or enhance the appearance or functionality of the site and the applicable legal conditions are met.
Where consent is legally required, the technology will not be used until you have made the relevant choice.
16. Marketing, advertising and third-party tracking
If we use advertising, social-media tracking, conversion tracking or other technologies that track users for marketing purposes, these technologies will not be activated until the required consent has been obtained.
This includes technologies used to track visitors across different websites, create advertising profiles or measure advertising conversions where consent is required by PECR.
If we introduce additional tracking providers, we will update our cookie information and cookie controls accordingly.
17. Managing your cookie choices
When you first visit our website, you may be given controls allowing you to accept, reject or manage non-essential cookies.
You can change your preferences using the cookie-management option available on our website where enabled.
You can also control or delete cookies through your browser settings. Blocking some necessary cookies may affect the operation of parts of our website, including the shopping basket or checkout.
Where consent is required, non-essential cookies will not be placed merely because you continue browsing the website.
18. Third-party content and links
Our website may contain links to other websites or services.
Those organisations may use their own cookies or process personal information under their own privacy policies. Bristol Pie Society does not control the privacy practices of independent third-party websites.
19. Your data protection rights
Depending on the circumstances and the lawful basis on which we process your information, UK data protection law may give you rights to request access to your personal information, request correction of inaccurate information, request deletion of information, request restriction of processing, object to certain processing and receive certain information in a portable format.
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have an absolute right to object to the use of your personal information for direct marketing.
These rights are subject to certain legal conditions and exemptions.
To exercise your rights, please contact Bristol Pie Society using the contact details below.
20. Complaints
If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.
You also have the right to complain to the Information Commission, the UK's data protection regulator.
Information about making a complaint can be found at ico.org.uk.
21. Changes to this policy
We may update this Privacy & Cookie Policy from time to time, for example where our services, suppliers, technology or legal obligations change.
The latest version will always be published on this website and the “last updated” date at the top of the policy will be amended.
22. Contact us
For questions about this Privacy & Cookie Policy, how we use your personal information or to exercise your data protection rights, please contact:
Bristol Pie Society
The Gloucester Old Spot
138–140 Kellaway Avenue
Bristol
BS6 7YQ
United Kingdom
Website: bristolpiesociety.co.uk