Privacy policy

Shopify Privacy Policy

Last updated: 30 August 2026

This privacy notice explains how Sophie Clanachan, trading as Rhea’s Raw ("Rhea’s Raw", "we", "us" or "our"), collects and uses personal information when you visit rheasraw.co.uk, shop with us, contact us, submit a review or otherwise interact with the business.

Who is responsible for your information

The data controller is Sophie Clanachan, trading as Rhea’s Raw.

Address: 28A Foxmoor Business Park Road, Wellington, TA21 9RF, United Kingdom
Email: info@rheasraw.co.uk
Telephone: 01823 765128

Information we collect

Depending on how you interact with us, we may collect:

• your name, billing and delivery address, email address and telephone number;
• order, payment status, refund, collection and local delivery information, including delivery instructions;
• customer account details and preferences;
• messages sent through email, contact forms, chat, social media or in connection with an order;
• newsletter choices and marketing preferences;
• reviews, photographs or other content you choose to submit;
• technical and usage information such as IP address, browser and device type, cookie identifiers, pages and products viewed, searches and interactions with the website; and
• information used to detect fraud, protect accounts and keep the website and checkout secure.

Payment card information is processed securely by Shopify and the relevant payment provider. Rhea’s Raw does not ordinarily receive or store your full card number.

How and why we use information

UK data protection law requires us to have a lawful basis for each use of personal information.

• Contract: to process and fulfil orders; take payment; arrange collection or local delivery; operate customer accounts; provide order updates; and respond to questions about an order.
• Legal obligation: to maintain tax and accounting records; manage refunds and consumer rights requests; respond to lawful requests; and meet product safety, traceability or recall obligations.
• Legitimate interests: to prevent fraud and misuse; secure and improve our website and services; manage stock and business operations; understand overall store performance; handle complaints; and establish, exercise or defend legal claims. We consider the impact on your rights before relying on this basis.
• Consent: to send email marketing where consent is required and to use optional analytics or advertising cookies and similar technologies. You may withdraw consent at any time.

Marketing

If you subscribe to our newsletter, we may send feeding information, product news and occasional offers. You can unsubscribe using the link in any marketing email or by contacting us. You have an absolute right to object to the use of your information for direct marketing.

We may keep a limited suppression record after you unsubscribe so that we can respect your preference.

Who we share information with

We share only the information reasonably needed for the relevant service. Recipients may include:

• Shopify, which hosts our online store, checkout, customer accounts, analytics and related services;
• payment providers, including Shopify Payments and PayPal;
• email, newsletter and communications providers, including IONOS and Mailchimp;
• accounting and record keeping providers, including Xero where used;
• review and customer experience providers, including Judge.me and Vitals;
• local delivery scheduling tools, including Logbase services where used;
• analytics and advertising providers, including Google and Meta, where the relevant service and consent settings are enabled;
• professional advisers, insurers, regulators, law enforcement bodies or public authorities where reasonably necessary or legally required; and
• a purchaser or successor if the business is reorganised or transferred, subject to appropriate confidentiality and legal safeguards.

Rhea’s Raw currently provides local delivery itself rather than passing delivery details to a parcel courier. We do not sell or trade customer mailing lists.

International transfers

Some service providers may process information outside the United Kingdom. Where UK data protection law treats this as a restricted transfer, we rely on an applicable UK adequacy regulation or appropriate safeguards, such as approved contractual protections. Further information about a provider’s arrangements can be found in its privacy notice or requested from us.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, tax, accounting, product safety and resolving disputes requirements.

• Order, payment and accounting records are normally retained for at least the period required by HMRC for a self employed business, generally five years after the 31 January filing deadline for the relevant tax year, and longer where an enquiry, dispute or other legal obligation requires it.
• Customer account information is kept while the account remains active, subject to any order records we must retain separately.
• Customer service, contact form and chat records are kept for as long as reasonably needed to resolve and keep a proportionate record of the enquiry.
• Marketing information is kept until you unsubscribe, withdraw consent or we determine it is no longer needed, with a limited suppression record retained where necessary.
• Reviews may remain published while relevant to the product or business, unless removed or anonymised as appropriate.

When information is no longer required, we delete or anonymise it where reasonably practicable.

Cookies and similar technologies

We use strictly necessary cookies to operate functions such as the basket, checkout, security, customer accounts and privacy preferences. We may also use analytics, personalisation and advertising cookies or pixels to understand website use and measure or improve marketing.

Where consent is required, optional technologies are used only after you make a choice through our cookie controls. You can change or withdraw your choice through the privacy or cookie controls shown on the website, or by clearing cookies and revisiting the site. Blocking necessary cookies may prevent parts of the store or checkout from working correctly.

Cookie names and durations can change as Shopify and installed services are updated. See Shopify’s cookie information and the privacy notices of the providers identified above for further details.

Fraud prevention and automated processing

Shopify and payment providers may use automated systems to identify suspicious transactions and protect the checkout. Rhea’s Raw does not make decisions based solely on automated processing that produce legal or similarly significant effects for customers.

Your rights

Depending on the circumstances, you may have rights to:

• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain information in a portable format; and
• withdraw consent without affecting earlier lawful processing.

These rights are not absolute and may be limited where we must retain or use information for a legal obligation or legal claim. To exercise a right, email info@rheasraw.co.uk. We may need to verify your identity before responding.

Children

Our online store is intended for adults. We do not knowingly collect personal information from children. A parent or guardian who believes a child has provided information may contact us.

Complaints

Please contact us first so that we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office through the Information Commissioner’s Office website.

Changes to this notice

We may update this notice when our services, providers or legal obligations change. The date at the top shows when it was last revised.