1. Important Information and Who We Are

Purpose of This Privacy Policy

This privacy policy explains how The Curator collects and processes your personal data through your use of our website, including data you provide when you sign up to our newsletter, make a purchase, or join our mailing list.

This website is not intended for children, and we do not knowingly collect data relating to children.

Please read this policy alongside any other privacy or fair processing notices we may provide on specific occasions, including our Cookie Policy. This policy supplements those notices and does not override them.

Controller

The Curator is the controller responsible for your personal data.

The Curator is a trading name of Italian Food Heroes Limited (Company No. 09461685), registered at 4 Heathfield, Newton Abbot, TQ12 6RQ.

Italian Food Heroes Ltd is associated with Lamaro Bakery Ltd (Company No. 10948213), also registered at the same address. These companies share administrative resources, and in some cases, data may be shared. In such cases, Italian Food Heroes Ltd is the data controller and Lamaro Bakery Ltd acts as a processor.

Contact Details

Data Privacy Manager
Email: hello@thecurator.co.uk
Postal Address: The Curator, 2 The Plains, Totnes, TQ9 5DR

You have the right to complain to the Information Commissioner’s Office (www.ico.org.uk), but we ask that you contact us first to resolve concerns.

Changes to the Privacy Policy

We review this policy regularly. Please keep us informed of changes to your personal data.

Third-party Links

Our website may include links to third-party websites or plugins. We do not control these sites and are not responsible for their privacy practices.

2. The Data We Collect About You

"Personal data" means any information that can identify an individual. We may collect:

• Identity Data: name, username, title, date of birth
• Contact Data: address, email, phone number
• Financial Data: payment card or bank details
• Transaction Data: payment and purchase history
• Technical Data: IP address, browser type, location, OS
• Profile Data: login details, preferences, feedback
• Usage Data: interactions with our website
• Marketing Data: your communication preferences

We also collect aggregated data (e.g., site usage statistics) which is not personal data unless it can identify you.

We do not collect special category data (e.g. health, ethnicity, religion).

If You Fail to Provide Personal Data

If we need your data to fulfil a contract and you do not provide it, we may be unable to perform the contract.

3. How Is Your Personal Data Collected?

• Direct interactions: e.g. placing an order, emailing us, signing up to marketing
• Automated technologies: e.g. cookies that collect Technical and Usage Data
• Third parties:
• Analytics from Google (outside the UK)
• Ad networks such as Google and Facebook (outside the UK)
• Payment and delivery providers such as Shopify and its partners
• Public sources like Companies House

4. How We Use Your Personal Data

We use your data when legally allowed, including:

• To perform a contract
• For legitimate business interests
• To comply with legal obligations

We only rely on consent for direct third-party marketing. You can withdraw consent at any time.

Purposes for Using Your Data

We use your data:

• To register you as a customer
• To process payments and deliver orders
• To manage our relationship and send updates
• To run competitions, promotions, surveys
• To administer and protect our website
• For personalised marketing and analytics
• To make product/service recommendations
• To provide and tailor the Shopify-hosted shopping experience
• To authenticate your account and prevent fraud
• To communicate with you and provide support
• To comply with legal obligations

Marketing and Behavioural Advertising

We may use cookies and third-party tools to show relevant ads based on browsing history. This may include behavioural retargeting. You can opt out, but you may still see generic ads.

Third-party Marketing

We will obtain your consent before sharing your data with third parties for marketing purposes.

Opting Out

You can opt out of marketing at any time via your account settings or by contacting us.

Change of Purpose

We will only use your data for the purpose it was collected unless legally permitted to do otherwise.

5. How We Disclose Personal Data

We may share your data with:

• Internal third parties: Italian Food Heroes Ltd and Lamaro Bakery Ltd
• External providers: Shopify (hosting, ecommerce platform, marketing analytics), payment processors, legal or regulatory bodies
• Business and marketing partners (with your consent) for targeted advertising
• Prospective buyers if the business is sold or restructured
• Third parties where you have requested or consented (e.g. fulfilment partners, social login features)

Shopify Relationship

Our services are hosted by Shopify. Shopify may use your personal data independently to enhance services across its platform. To learn more about how Shopify processes your data or to exercise rights over that data, visit Shopify's Privacy Policy or Shopify Privacy Portal.

6. Data Security

We have appropriate security measures and restrict access to those who need it. We will notify you and regulators of any data breach where required.

Note: No system is perfectly secure. Avoid sending sensitive personal data via unencrypted methods.

7. Data Retention

We retain your data only as long as necessary to fulfil legal or business needs, including:

• Order processing and account maintenance
• Legal compliance
• Dispute resolution
• Fraud prevention

We may anonymise data for statistical use.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access your data
• Correct inaccuracies
• Delete your data
• Request data portability
• Restrict or object to processing
• Withdraw consent

You may also manage communication preferences at any time. We will not discriminate against you for exercising your rights.

UK and EEA residents have additional rights under local law. Identity verification may be required. Requests may be submitted via email to hello@thecurator.co.uk.

9. International Data Transfers

Your data may be transferred outside your country. If data is transferred outside the UK or EEA, we will ensure it is protected via recognised mechanisms such as Standard Contractual Clauses.

10. Complaints

If you have concerns about how we process your personal data, contact us directly first. You also have the right to lodge a complaint with your local data protection authority.

11. Changes to This Privacy Policy

We may update this policy to reflect changes in legal, regulatory, or operational needs. Updates will be posted here with a revised "Last updated" date.