Privacy Policy

Fresh Heights Ltd

Effective Date: 22 September 2023
Last Updated: 10 May 2026

At Fresh Heights Ltd (“we”, “us”, “our”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you use our website, purchase products or services, make enquiries, or otherwise interact with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Contact Details

Fresh Heights Ltd
Grosvenor House
3 Chapel Street
Congleton
Cheshire
CW12 4AB

Email: info@freshheights.co.uk
Website: freshheights.co.uk

For privacy-related enquiries, please contact:
privacy@freshheights.co.uk

2. The Information We Collect

We may collect and process the following personal information:

  • Name

  • Organisation name

  • Email address

  • Telephone number

  • Billing and delivery address

  • Payment-related information

  • Information relating to enquiries, bookings or purchases

  • Subscription or membership details

  • Files or information submitted through forms

  • Technical and usage data collected through cookies and analytics

3. How We Collect Your Information

We collect personal information:

  • directly from you when you contact us, place an order, subscribe, complete forms or book appointments;

  • automatically through cookies, analytics tools and website technologies;

  • indirectly through third-party service providers such as Squarespace, Stripe, PayPal and Google services.

4. How We Use Your Information

We use your information to:

  • respond to enquiries;

  • process orders, bookings and subscriptions;

  • deliver products and services;

  • manage customer accounts;

  • communicate important account or order information;

  • improve our website, services and customer experience;

  • send marketing communications where permitted;

  • maintain website security and prevent fraud;

  • comply with legal obligations.

5. Lawful Bases for Processing

Under UK GDPR, the lawful bases we rely on include:

Contractual Necessity

Where processing is necessary to fulfil an order, booking or service you request.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

Consent

Where you have given consent, such as subscribing to marketing communications or accepting optional cookies.

Legal Obligation

Where we are required to process data to comply with legal or regulatory responsibilities.

6. Payments

Payments made through our website may be processed securely through third-party payment providers such as Stripe or PayPal.

We do not store full payment card details on our systems.

7. Website Hosting and Third-Party Services

Our website is hosted by Squarespace. Squarespace may collect technical information including:

  • browser type,

  • IP address,

  • network and device information,

  • pages visited before and during use of the website.

We may also use third-party services including:

  • Google Drive

  • Zapier

  • Google Places API

  • Stripe

  • PayPal

  • Google Fonts

  • Adobe Fonts

These providers may process personal information as part of the services they provide to us.

8. Cookies and Analytics

Our website uses cookies and similar technologies to:

  • ensure website functionality,

  • improve performance,

  • analyse website traffic and usage,

  • personalise user experience.

Analytics and performance cookies are only used where you provide consent through our cookie banner.

You can control cookies through your browser settings.

9. Marketing Communications

We may send marketing emails about our products, services or updates where you have opted in or where lawful to do so.

You can unsubscribe at any time by clicking the unsubscribe link included in marketing emails.

Please note that transactional emails relating to orders, bookings or account activity cannot be unsubscribed from.

10. How We Store and Protect Your Information

Your information is stored securely using password-protected systems and secure third-party providers including Squarespace and Google Drive.

We take reasonable technical and organisational measures to protect personal information from:

  • unauthorised access,

  • loss,

  • misuse,

  • disclosure,

  • alteration,

  • or destruction.

11. Data Retention

We only retain personal information for as long as reasonably necessary to:

  • fulfil the purposes it was collected for,

  • comply with legal, accounting or tax obligations,

  • resolve disputes,

  • or enforce our agreements.

12. Your Data Protection Rights

Under UK data protection law, you have rights including:

  • The right to access your personal information

  • The right to correct inaccurate or incomplete information

  • The right to request erasure of your data

  • The right to restrict processing

  • The right to object to processing

  • The right to data portability

  • The right to withdraw consent where applicable

You are not required to pay any fee to exercise these rights.

We will respond to requests within one month.

To exercise your rights, please contact:
privacy@freshheights.co.uk

13. External Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page with a revised effective date.

15. Complaints

If you have concerns about how we use your personal information, please contact us first at:
info@freshheights.co.uk

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

Website: https://www.ico.org.uk