Last updated: 16.9.25

This notice explains what personal data we collect, how we use it, and your rights under UK GDPR, the Data Protection Act 2018 and PECR. It applies to allfreschgroup.com, related sites and our business operations.

Who we are (Controller)

Allfresch Group Ltd
Parkside Business Centre, Holyhead Road,
Albrighton, Shropshire, WV7 3DA, United Kingdom
Tel: +44 (0) 1952 460608
Email: info@allfreschgroup.com

Personal data we collect

• Website & cookies: IP address, device/browser details, pages viewed and preferences.
• Enquiries & forms: name, email, phone, company, role and your message.
• Customers & suppliers: contacts, contracts, orders, deliveries, payments and compliance info.
• Marketing: subscription and interaction data (where you opt in).
• Recruitment: CVs, applications and interview notes.

How and why we use your data (lawful bases)

• To respond to enquiries, provide quotes and deliver services (contract/pre-contract).
• To operate and improve our websites and systems (legitimate interests).
• To manage orders, logistics, finance and supplier relations (contract/legitimate interests).
• To send marketing where permitted or consented; you can opt out anytime (consent/legitimate interests).
• To meet legal, tax, traceability and product safety obligations (legal obligation).
• To process job applications (consent/legitimate interests; contract if hired).

Cookies and analytics

We use essential cookies to make the site work and optional analytics cookies (e.g. Google Analytics 4) to understand usage. Non-essential cookies are set only with your consent via our cookie banner. You can change or withdraw consent at any time in the banner or your browser. See our Cookie Policy for details.

Sharing your data

We share personal data only as needed with service providers (hosting, IT, email/CRM, analytics, logistics, payment processing), professional advisers, insurers, auditors, regulators/authorities where required, group companies and supply-chain partners for fulfilment, quality, certification and traceability. We do not sell your personal data.

International transfers

Where data is transferred outside the UK, we use appropriate safeguards (e.g. UK IDTA or EU Standard Contractual Clauses with UK Addendum) plus technical and organisational measures.

How long we keep data

• Enquiries: up to 24 months after last contact.
• Customer/supplier records: contract term, then typically 6–7 years for legal/tax purposes.
• Marketing: until you opt out or consent is withdrawn, or it becomes inactive.
• Recruitment: normally 6 months after a decision (longer with consent); successful candidates per HR policy.

Your rights

You can request access, rectification, erasure, restriction, objection (including to direct marketing) and data portability. Where we rely on consent, you may withdraw it at any time.

To exercise your rights, contact info@allfreschgroup.com. We will respond within one month (extendable for complex requests).

Marketing

We send marketing to business contacts where permitted by law and to individuals who have opted in. You can unsubscribe via the link in our emails or by contacting us.

Security

We apply appropriate technical and organisational measures, including access controls, staff training and vendor due diligence. No system is completely secure; please take care when sharing information online.

Children

Our services are not directed at children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Third-party links and embedded content

Our site may link to third-party websites or embed content (e.g. maps or videos). Those services have their own privacy notices.

Complaints

Please contact us first at info@allfreschgroup.com. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk.

Changes to this notice

We may update this page from time to time. We will post the new version here and update the “Last updated” date above.