Privacy Policy

The data controller is ROCK SALT CATERING & EVENTS LTD (“Saltcellar”, “we”, “us”), a private limited company registered in the United Kingdom, with its registered office at 85 Hughenden Lane, G12 9XN, Scotland. For any privacy question or request, contact us at support@rocsalcateve.shop or +44 7525559924.

• Contact and account details: name, email address, phone number, and country.
• Order and delivery data: shipping address, the kits ordered, order value and history.
• Payment data: we do not collect or store full card numbers. Payments are processed by Stripe; we receive only confirmation of payment and limited billing metadata.
• Support and enquiry data: the content of messages you send us via the contact, custom-order or wholesale forms.
• The Host Match inputs: the occasion, guest count, palette and budget you select to generate a recommendation. These are used to build your box and are not used to train models.
• Technical and usage data: device, browser, and essential cookies needed to run the cart and checkout. See our Cookie Policy.

Our collection sources are limited and listed here in full:

• Directly from you: when you place an order, complete the checkout delivery form, use The Host Match, subscribe to Table Club, or submit the contact or custom/wholesale forms.
• Automatically from your device: essential cookies, browser local storage for the cart, and server logs generated when you browse the store.
• From our payment processor: Stripe returns payment confirmation and limited billing metadata (such as the last four digits of the card and the billing country) after checkout.
• From our delivery partners: shipping carriers return tracking and delivery-status events for your parcel.

We do not buy personal data from data brokers, and we do not collect personal data about you from social networks or advertising networks.

Because we ship physical hosting kits, order fulfilment is the main reason we process your data. Specifically:

• Delivery address: your name, street address, city, postal code, country and optional phone number are collected at checkout and used solely to pick, pack and deliver your order. We pass them to the shipping carrier handling your parcel.
• Order fulfilment records: the kits ordered, order value, order number and dispatch/tracking status are retained so we can fulfil the order, prove delivery and handle any follow-up.
• Logistics carriers: our carriers act as processors for delivery and receive only the data needed to deliver (name, address, phone for delivery notifications). For international orders, carriers may pass declaration data to customs authorities as legally required.
• Returns and exchange support: if you request a return, refund or replacement, we process your order number, the reason given, any photos you send and your contact details in order to assess and resolve the case, and to issue a refund through Stripe.
• Payment and billing data: Stripe collects and processes your card details on its own hosted checkout. We never see or store your full card number, CVC or expiry. We receive only the payment result and limited billing metadata needed for accounting, refunds and dispute handling.
• Table Club billing: membership subscriptions are billed by Stripe on a recurring basis; we process invoice status (paid/failed) to keep member pricing accurate.

Legal bases: performance of your contract (fulfilment, delivery, returns), legal obligation (tax and accounting records) and legitimate interests (fraud prevention and dispute defence).

• To fulfil your order — process payment, ship kits, handle returns (legal basis: performance of a contract).
• To provide support and answer enquiries (legitimate interests / contract).
• To operate Table Club memberships and apply member pricing (contract).
• To keep records and meet legal obligations such as tax and accounting (legal obligation).
• To improve our service and, where permitted, send updates you have asked for (legitimate interests or consent). You can opt out of marketing at any time.

We share personal data only with processors that help us run the store:

• Payment: Stripe (payment processing and fraud prevention).
• Hosting & infrastructure: Vercel (application hosting) and Supabase (secure database for orders, memberships and enquiry records).
• Delivery: the shipping carriers and fulfilment partners who deliver your kits.
• Email: our transactional email provider, to send order and support messages.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

Some processors are located outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision.

We keep order and transaction records for as long as needed to fulfil the order and to meet legal, tax and accounting obligations (typically up to six years). Enquiry and marketing lead data is kept for no more than 24 months from your last interaction, unless you ask us to delete it sooner. The Host Match inputs are retained only as long as needed to build and adjust your box.

We use encryption in transit, access controls, and reputable processors. Card data is handled entirely by Stripe under PCI-DSS; it never reaches our servers. No method of transmission is perfectly secure, but we take reasonable steps to protect your data.

You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. To exercise any right, email support@rocsalcateve.shop. We respond within one month.

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct it, and to not be discriminated against for exercising these rights. We do notsell or share personal information as defined by the CCPA. To make a “Do Not Sell or Share My Personal Information” request, contact support@rocsalcateve.shop — although we do not sell or share, we honour these requests as opt-outs of any future such activity.

We use essential cookies to run the cart, checkout and admin session. Full detail is in our Cookie Policy.

The Host Match provides shopping suggestions only; it does not make legal or significant automated decisions about you. Our store is not directed at children: it is not for use by anyone under 13, and customers aged 13–17 must have a parent or guardian complete any purchase.

If you have a concern, contact us first at support@rocsalcateve.shop. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or to your local EU supervisory authority.