Privacy policy

The short version

• The enquiry form is the only place we ask you for personal data, and we use it to answer you and to send samples.
• We do not sell your details, and we do not add you to a mailing list.
• Analytics stays switched off until you allow it, and it measures pages rather than people.
• You can ask us what we hold, ask for it to be corrected, or ask us to delete it, at info@cookedonions.food.

Who is responsible for your data

Snac Fresh 108 Ltd is the data controller for this website. We are registered in England and Wales under company number 16907536, with a registered office at 71-75 Shelton Street, London WC2H 9JQ. Cooked Onions is a trading brand of that company. For anything in this policy, write to info@cookedonions.food.

What we collect

What you send us

When you complete the enquiry form we receive your first and last name, company name, company registration number if you pick your company from the lookup, email address, telephone number, the rough weekly onion volume you selected, any ranges you ticked, and whatever you write in the message box. Please keep the message to business matters and avoid sending anything sensitive through it.

What your browser sends

Our server records your IP address when you submit an enquiry, and uses it to limit how many enquiries can be sent in a short period. That is held in memory for a short time to blunt automated abuse, and it is not used to build any profile of you. Standard server logs at our hosting provider record requests to the site.

What we measure, only if you allow it

If you accept analytics, we load Vercel Analytics, which counts page views and reports them in aggregate: which pages get read, roughly where visitors are in the world, and what kind of device they use. It does not use cookies and does not follow you to other websites. If you reject analytics, or have not made a choice, the script is never loaded. The cookie policy lists everything we store on your device.

Company name lookup

As you type a company name, the form asks the Companies House public register for matching companies so you can pick yours. The characters you type are sent through our server to Companies House for that search. Companies House is responsible for its own use of that request.

Why we use it, and our lawful basis

• To answer your enquiry and send samples. Our lawful basis is legitimate interests, namely responding to a business that has approached us, and where relevant taking steps at your request before entering a contract.
• To keep our own records of who we have dealt with. Legitimate interests, namely running and evidencing our business.
• To protect the site from abuse, through rate limiting and spam traps. Legitimate interests, namely keeping the service available and our inbox usable.
• To measure how the site is read. Consent, which you give or refuse in the cookie banner and can change at any time.
• To meet legal duties, such as accounting and tax record keeping, where we go on to trade with you.

Who else handles it

We keep the list of suppliers short, and each of them acts on our instructions:

• Vercel hosts this website and delivers it to your browser.
• Resend delivers your enquiry to our inbox as an email, and sends you a confirmation that it arrived.
• Slack receives an internal notification so the team sees a new enquiry quickly.
• HubSpot holds your enquiry as a contact record so we can track and answer it. This happens on our server when you submit the form. HubSpot sets no cookies on this site and does not know you were here unless you send us an enquiry.
• Our email provider stores the resulting correspondence.

We may also share information with professional advisers, or where the law requires it. We do not sell personal data, and we do not share it for anyone else’s marketing.

The typefaces on this site are served from our own domain, so viewing a page does not tell a font provider that you were here.

Where it goes

Some of these providers are based outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK, we rely on the safeguards permitted by UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum. You can ask us which applies to a particular provider.

How long we keep it

• Enquiries that do not lead to trading: up to 24 months after our last contact with you, so we can pick the conversation back up if you return to us.
• Customers: for as long as we trade together, then for six years from the end of the relevant financial year, which is what tax and accounting rules expect.
• Rate limiting records: minutes, in memory only.
• Your cookie choice: stored in your own browser until you change or clear it.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong or incomplete;
• delete it, where we have no continuing reason to keep it;
• restrict how we use it, or object to our use of it where we rely on legitimate interests;
• provide it in a portable form, where we rely on consent or on a contract and process it by automated means;
• withdraw consent for analytics at any time, which does not affect measurement that already happened.

Write to info@cookedonions.food and we will answer within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner at ico.org.uk or on 0303 123 1113. We would rather you told us first, so we can put it right.

Children

This is a trade website for professional buyers. It is not aimed at children, and we do not knowingly collect their data.

Changes to this policy

When we change how we handle personal data, we update this page and the revision date at the top of it. If the change is significant, we will make that clear on the site.