Privacy Policy

1. Who is responsible for your data

The data controller is MCALLISTER DELI COMPANY LIMITED, 80 Great Northern Road, Aberdeen, Scotland, AB24 3QB, United Kingdom. You can reach us about privacy at support@mcallisterdeli.shop or by phone at +44 7232723936.

2. What we collect

• Order and delivery data: name, email, phone, delivery and billing address, order contents, gift notes and recipient details you provide.
• Account and membership data: if you join the Larder Club, your subscription tier, billing cycle and membership status.
• Support and enquiry data: messages you send via our contact and wholesale forms, and our replies.
• Payment data: handled by our payment processor. We receive confirmation and limited details (such as the last four digits and card brand) but never your full card number.
• Technical and usage data: IP address, device and browser type, and essential cookies needed to run the cart, checkout and security features.

3. Collection sources

We collect personal data from the following collection sources:

• Directly from you when you browse, build a box, add to your box list, check out, subscribe to the Larder Club, or contact us through our forms.
• Automatically from your device via strictly necessary cookies and local storage that run the cart, checkout and security features.
• From our payment processor (Stripe) when it confirms a payment, refund or subscription event.
• From delivery carriers when they provide dispatch and tracking updates for your order.

4. Order, fulfilment and delivery data

Because we ship physical boxes, we process order and fulfilment data specific to getting your box to the right place:

• Shipping address and recipient details: the delivery (shipping) address, recipient name and, for direct-to-recipient gifts, the recipient's address and any gift-note text — used to pick, pack and ship your order.
• Order fulfilment records: the boxes ordered, order value in USD, dispatch status and tracking, retained to fulfil the order and handle any issue.
• Delivery carriers: we share the shipping address and contact details with our logistics/postal carriers solely to deliver your parcel and provide tracking. International orders may involve customs authorities in the destination country.
• Returns, replacements and customer service: if a box arrives damaged, wrong or undelivered, we process your order reference, photos and correspondence to arrange a replacement or refund under our Refund & Returns Policy and Shipping & Delivery Policy.
• Payment and billing data: your billing address and the payment confirmation Stripe returns (such as card brand and last four digits) are used for order billing, fraud prevention and accounting. We never receive or store your full card number.

5. Why we use it and our legal bases

• To fulfil your order and deliver your box — performance of a contract.
• To manage Larder Club subscriptions and billing — performance of a contract.
• To provide customer support and handle allergen or delivery queries — performance of a contract and our legitimate interests.
• To follow up on started but unfinished checkouts — our legitimate interest in re-contacting interested customers; you may opt out at any time.
• To keep the site secure and prevent fraud — legitimate interests and legal obligation.
• To meet tax, accounting and consumer-law obligations — legal obligation.
• To send marketing — only with your consent, which you can withdraw at any time.

6. Payment provider boundary

Payments are processed by Stripe. Card details are entered on Stripe's secure, PCI-DSS-compliant checkout and are transmitted directly to Stripe. We never see or store your full card number, CVC or full card data. Stripe acts as an independent controller/processor for payment data under its own terms and privacy policy.

7. Who we share it with

We share personal data only with service providers who help us run the store, and only as needed:

• Hosting and delivery of the website: our cloud hosting provider.
• Payments: Stripe, for card and subscription processing.
• Database and lead storage: our managed database provider, which stores order and enquiry records.
• Email: our transactional email provider, to send confirmations and replies.
• Shipping and logistics carriers: to deliver your box to the address you provide.

We do not sell your personal data. We may disclose data where required by law.

8. International transfers

Some providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as UK/EU adequacy decisions or Standard Contractual Clauses to protect your data.

9. How long we keep it

Order and billing records are kept as long as needed to fulfil the order and to meet tax and accounting obligations. Marketing and enquiry leads are kept for no more than 24 months from your last interaction unless you ask us to delete them sooner. Support messages are kept for up to 24 months.

10. Your rights

Under UK GDPR and EU GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to know, delete, correct, and to opt out of the sale or sharing of personal information.

11. Do Not Sell or Share

We do not sell or share your personal information for cross-context behavioural advertising. If our practices ever change, we will provide a clear opt-out. To make any rights request, email support@mcallisterdeli.shop.

12. Cookies and analytics

We use essential cookies to operate the cart, checkout and security. Any non-essential or analytics cookies are used only with your consent. See our Cookie Policy for details.

13. Automated decisions, children and security

The Larder Builder offers guidance-only recommendations and does not make legally significant automated decisions about you. Our store is not directed at children: it is intended for adults (18+); anyone aged 13–17 must have a parent or guardian's consent to order, and we do not knowingly collect data from children under 13. We protect your data with encryption in transit, access controls and reputable processors.

14. Complaints and contact

You can contact us any time at support@mcallisterdeli.shop. If you are in the UK and are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO). EU residents may contact their local supervisory authority. This policy is governed by the laws of England and Wales.