Privacy Policy
This policy explains what personal information The Great British Cheese Company collects, why we use it, who we share it with and the choices you have.
Last updated: 12 September 2026Who we are
The Great British Cheese Company is responsible for deciding how and why personal information covered by this policy is used. In data protection terminology, we are the data controller.
Unit 4a, Kingston Mill Industrial Estate
Manchester Road
Hyde, Cheshire
SK14 2BZ
Email: support@gbcheese.co.uk
Telephone: 0161 399 2536
This policy applies when you use our website, place an order, create an account, contact us, receive a gift from one of our customers, enter a promotion or subscribe to our marketing.
Information we collect
Identity and contact details
Your name, email address, telephone number, billing address and delivery address.
Order information
Products ordered, amounts paid, discounts, order status, purchase history and refund information.
Delivery information
Delivery address, courier instructions, tracking details and delivery confirmation.
Gift information
The gift recipient’s name and address, the customer’s gift message and related order information.
Account information
Your account login details, saved addresses, preferences and previous orders.
Messages and support
Emails, forms, complaints, reviews, enquiries and other communications you send to us.
Marketing preferences
Whether you have asked to receive marketing and how you interact with our marketing emails.
Technical information
Your IP address, browser, device, website activity, security logs and cookie preferences.
Payment information
Card payments are processed securely by our payment provider, Teya. We do not receive or store your complete payment card number or card security code. We receive the information needed to confirm, manage or refund your payment.
How we collect information
We collect information:
- directly from you when you order, create an account, complete a form or contact us;
- automatically when you use our website, including through cookies and server logs;
- from payment, fraud-prevention, delivery and fulfilment providers;
- from another customer when they place an order or arrange a gift for you; and
- from publicly available sources where reasonably necessary to verify business or wholesale information.
If somebody sends you a gift
We may receive your name, delivery address and contact details from the person ordering the gift. We use this information to prepare and deliver the order, provide delivery updates and deal with any related issue.
Customers providing another person’s information should make sure they are entitled to do so and, where appropriate, tell that person about this policy.
How and why we use your information
UK data protection law requires us to have a lawful basis for every way we use personal information. The main purposes and bases we rely upon are:
Where we rely on legitimate interests, those interests include operating and improving our business, protecting customers, preventing fraud and providing effective customer service. We consider whether our interests are proportionate and whether your rights should take priority.
Information required to place an order
Certain checkout details are required so that we can accept payment and deliver your order. If you do not provide the required information, we may be unable to complete the order. Gift messages, delivery notes, account creation and marketing subscriptions are optional.
Who we share information with
We only share personal information where reasonably necessary to operate our business, provide an order or comply with the law.
Our service providers may only use information for the service they provide to us, subject to their contractual and legal responsibilities. Some providers may also act as an independent data controller for parts of their service.
You can read the relevant provider information here: Teya privacy notice, ShipStation privacy policy, APC privacy policy and Intuit/Mailchimp privacy statement.
We do not sell or rent your personal information.
Business changes
If our business or assets are sold, reorganised or transferred, relevant information may be shared with advisers and a prospective or new owner, subject to appropriate confidentiality and data protection requirements.
International data transfers
Some service providers may store or process information outside the United Kingdom. Where this involves a restricted international transfer, we take steps designed to protect the information.
These steps may include using a country covered by UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another safeguard recognised under UK data protection law.
You can contact us if you would like more information about the safeguards applying to a particular service provider.
Cookies and similar technology
Cookies are small files stored on your device. We use necessary cookies to operate important website functions such as the basket, checkout, account, security and cookie choices.
With your permission, we may also use optional cookies or similar technology for analytics, marketing, embedded content or measuring how people use the website.
You can accept, refuse or change optional cookie choices using the Cookie Preferences link at the bottom of our website. Blocking necessary cookies in your browser may prevent parts of the shop or checkout from working correctly.
Marketing communications
If you subscribe to our emails, we may send you information about cheeses, gifts, offers, events, discounts and company news.
You can stop receiving marketing at any time by using the unsubscribe link in an email or contacting us at support@gbcheese.co.uk .
Unsubscribing from marketing will not stop essential order, payment, delivery or customer-service messages.
You have the right to object to your personal information being used for direct marketing at any time. If you object, we will stop using it for that purpose.
How long we keep information
We only keep personal information for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-handling requirements.
Information may be kept for longer where required by law, where a dispute or investigation is ongoing, or where reasonably necessary to establish, exercise or defend legal claims.
How we protect information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures include controlled access, secure website connections, payment-provider security, website maintenance and backups.
No website or electronic system can be guaranteed completely secure. If you believe your account or information may have been compromised, please contact us promptly.
Your data protection rights
Depending on the circumstances, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of information we no longer need or have no lawful reason to retain.
- Restrict how your information is used in certain circumstances.
- Object to processing based on legitimate interests and to direct marketing.
- Data portability for certain information processed electronically by consent or contract.
- Withdraw consent at any time where our use is based on consent.
- Complain about how your personal information has been handled.
These rights are not always absolute, and legal record-keeping requirements may mean that we cannot delete certain information immediately.
To exercise a right, email support@gbcheese.co.uk . Please describe what you are requesting and provide enough information for us to identify the relevant records.
We may ask for reasonable evidence of identity before releasing or changing information. We normally respond within one month once we have the information needed to deal with the request.
Requests are normally free, although the law allows a reasonable fee or refusal in limited circumstances.
Automated decision-making
We do not use your personal information to make decisions based solely on automated processing that produce legal or similarly significant effects for you.
Payment and fraud-prevention providers may carry out their own security checks under their respective privacy policies.
Privacy complaints
Please contact us first if you have a concern so that we have the opportunity to investigate and put matters right.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint
Other important information
Children
Our online shop is not directed at children, and we do not knowingly collect personal information directly from children through the website.
Links to other websites
Our website may contain links to websites operated by other organisations. Their use of personal information is governed by their own privacy policies, which we recommend reading.
Changes to this policy
We may update this policy when our services, providers or legal obligations change. The latest version will always appear on this page with the updated date shown at the top.
If we make a significant change affecting how existing personal information is used, we will take reasonable steps to bring it to your attention before the new use begins.
Questions about your information?
Contact us if you have a privacy question, want to exercise one of your rights or believe any information we hold is incorrect.
