Privacy Policy

Last updated: 3 September 2026

This page explains what personal information we collect when you visit our website or buy from us, why we collect it, and what rights you have over it. This policy is written to comply with the UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, contact us at wood.butter@outlook.com or by post at the address below.

​

Who we are

This website is operated by Miguel's Cocina Ltd, trading as Wood Butter (company number 16301099), registered in England & Wales, whose registered office is at 149 Norsey View Drive, Billericay, Essex, CM12 0QX.

For data protection purposes, Miguel's Cocina Ltd is the "controller" of the personal information described in this policy.

​

What information we collect

Information you give us directly — when you place an order, sign up to our newsletter, contact us, or otherwise get in touch, you may give us your name, email address, postal address, delivery address, billing address, and phone number.

Information collected automatically — when you browse our website, we (and the tools we use to run it) may automatically collect your IP address, device and browser information, and details of how you use the site, through log files, cookies, and similar technologies. See the "Cookies" section below for more detail.

Information from third parties — where you buy from us via a marketplace such as Amazon rather than directly through our website, that marketplace passes us order and delivery details needed to fulfil your order; their own privacy policy governs how they collected it.

​

Why we collect it, and our legal basis for doing so

UK GDPR requires us to have a lawful basis for each way we use your information. Here's how that breaks down:

• Processing and delivering your order, handling payments, dealing with returns or after-sales queries — necessary to perform our contract with you.

• Keeping financial records (invoices, order records) for tax purposes — necessary to comply with our legal obligations.

• Preventing fraud and protecting our business — legitimate interests (we've considered this doesn't override your rights).

• Sending you marketing emails or newsletters — your consent, which you can withdraw at any time.

• Running targeted ads on platforms like Instagram or Facebook using customer data — your consent (or legitimate interests where permitted — see "Marketing and advertising" below).

We never use automated decision-making or profiling that produces legal or similarly significant effects on you without human involvement.

​

Marketing and advertising

If you've opted in, we may email you about new products, offers, or updates. Every marketing email includes a link to unsubscribe or change your preferences, and you can also ask us directly at any time.

We do not currently use paid advertising platforms such as Meta/Instagram Ads or Google Ads. If we start using these in future, we'll update this section to explain what's shared and why — where that involves sharing your data with these platforms, we'll only do so with your consent or where the law otherwise permits it, and those platforms would process the data as separate controllers under their own privacy policies.

​

Cookies

Our website uses cookies and similar technologies to make the site work and, where relevant, understand how it's used. These generally fall into three categories:

• Strictly necessary cookies — required for the website to function (e.g. remembering items in your basket); these don't require consent.

• Analytics cookies — help us understand how visitors use the site; these require your consent.

• Advertising/marketing cookies — used to show you relevant ads on other sites; these require your consent.

You can manage or withdraw your cookie consent at any time via the cookie banner on our website.

​

Who we share your information with

We don't sell your personal information to anyone. At present, almost all of our sales happen through Amazon, so when you buy from us there, Amazon collects and processes your payment, delivery, and order details as the controller of that data under its own privacy policy — not under this one. We only receive the limited order and delivery information Amazon passes to us so we can fulfil and support your order.

Where we do collect information directly (through our website, by email, or through a newsletter sign-up), we share it with categories of organisations who help us run the business, including:

• Our website host and IT service providers (Wix)

• Marketplaces we sell through, such as Amazon, for orders placed there

• HMRC, our accountant, or law enforcement, where we're legally required to

• Credit reference and fraud prevention agencies, where necessary to prevent fraud

Some of these providers may be based outside the UK (for example, in the United States). Where that's the case, we make sure appropriate safeguards are in place, such as relying on providers certified under an approved data transfer framework or using standard contractual clauses approved for use in the UK.

​

How long we keep your information

• Order and financial records: 6 years, in line with UK tax record-keeping requirements.

• Marketing/newsletter contact details: until you unsubscribe or ask us to delete them, or after 2 years of inactivity.

• General enquiries (no purchase made): typically no more than 12 months from your last contact with us, after which we delete them unless we need to keep something specific for longer (e.g. an unresolved complaint).

Where we need to keep information longer to meet a legal obligation, resolve a dispute, or prevent fraud, we'll retain only what's necessary for that purpose.

​

Your rights

Under UK data protection law, you have the right to:

• be told how your information is used (this policy)

• access a copy of the personal information we hold about you

• have inaccurate information corrected

• ask us to delete your information in certain circumstances

• ask us to restrict how we use your information in certain circumstances

• receive your information in a portable format, or ask us to send it to another organisation

• object to us using your information for direct marketing, or in certain other circumstances

• ​

To exercise any of these rights, contact us at wood.butter@outlook.com. We'll respond within one month.

If you're unhappy with how we've handled your information, we'd like the chance to put it right first — please raise it with us at wood.butter@outlook.com and we aim to respond within 30 days. If you're not satisfied with our response, you also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF ico.org.uk | 0303 123 1113

​

Keeping your information secure

We take appropriate technical and organisational steps to protect your personal information against unauthorised access, loss, or misuse. No online service can guarantee complete security, but we review our practices regularly and only work with providers who take data protection seriously.

​

Changes to this policy

We may update this policy from time to time, for example as our business or the law changes. The date at the top shows when it was last revised — please check back occasionally.