Introduction

We are Good Food Project Ltd a limited company registered and trading in Scotland (company number SC727601). This Privacy Policy describes our processing of Personal Data and our compliance with all applicable Data Protection Laws, including the Data Protection Act 2018, The General Data Protection Regulations (UK GDPR) and Privacy and Electronic Communications Act (PECR 2003). We collect personal data from both Users of our website, www.goodfoodproject.co.uk (“Website”), and our Customers when they sign up for an account on our Website. 

In order to provide our services to you, we must process Personal Data about you, also known as Personally Identifiable Information (PII). We are committed to maintaining the highest standards of compliance and protecting your personal information. 

This privacy policy aims to explain the types of data we process, how we process it, who we share it with and how we protect it - so that you can make well-informed decisions about sharing your information with us. The policy also aims to outlay our duties and responsibilities in processing data about our Users and Customers

This Privacy Policy describes how www.goodfoodproject.co.uk collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

 

When this Privacy Policy applies

This policy applies to the personal information that we collect, use or ask you to provide to us to facilitate your use of our services and products on our Website. We are the Data Controller of the data we process and may instruct Data Processors on how to process your data on our behalf, only if they help us provide our services and products to you. This privacy policy applies as soon as you access our Services, visit our Website, contact or engage with us.

We may update this Privacy Policy from time to time to keep up with legislative or regulatory changes, and to ensure that it remains in line with our business needs and obligations. Any update or modification of the current version of this Policy will be considered applicable from the time of its publication. If we make material changes, such as how we may use your personal information, we will notify our website Users and Customers prior to the change becoming effective.

We strongly suggest that you read our Terms and Conditions so you may understand the terms that may apply to the use of our Website and Products. Should you have any questions, comments, or suggestions with regard to our privacy policy, we ask that you email us at: steve@goodfoodproject.co.uk 

By using our website or products, you are presumed to have read, understood, and accepted this Privacy Policy.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at steve@goodfoodproject.co.uk or by mail using the details provided below:

Good Food Project Ltd, Unit 5 Riverview Business Park, Friarton Rd, Perth, Perthshire, PH2 8DF

 

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

• Device information
  • Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site
  • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimise our Site.
  • Lawful Basis: Legitimate Interests
  • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
  • Disclosure for a business purpose: shared with our processor Shopify and Zoho
    
    
• Order information (name, email address, postal address, payment method, payment details)
  • Personal Information collected: name, billing address, shipping/delivery address, payment card information, email address, and phone number, social media profile (polls/surveys only)
  • Purpose of collection: to provide products or services to you, to fulfil our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services. If you have opted into marketing with us, you will occasionally receive invitations to participate in our survey polls on social media.
  • Lawful Basis: Performance of a contract (manage account and orders, process payments); Consent (marketing and polls)
  • Source of collection: Directly from you
  • Disclosure for a business purpose: shared with our processor Shopify, who hosts our online store, and Zoho, who host our data on our behalf.
    
    
• Customer support information
  • Purpose of collection: to provide customer support.
  • Source of collection: collected from you
  • Lawful Basis: Performance of a contract
  • Disclosure for a business purpose: shared with our processor Shopify
  • Personal Information collected: All order information plus any detail that you choose to tell us, relating to your enquiry/complaint/comment.

 

What grounds we process your data under

The General Data Protection Regulations (UK/EU) forbids the processing of personal data unless we are collecting and using your in line with one of 6 lawful bases, offered by Article 6 GDPR. The lawful bases we rely on are:

Consent: when an individual has given clear consent for their personal data to be processed for a specific purpose. This consent must be well-informed, freely given and can be withdrawn by you at any time by contacting steve@goodfoodproject.co.uk or by clicking ‘unsubscribe’ at the footer of any email correspondence or newsletter you receive from us.

Performance of a Contract: the processing is necessary for a performance of a contract, or because they have been asked to take specific steps before entering into a contract.

Legal Obligation: the processing is necessary for us to comply with the law (not including contractual obligations)

Vital Interests: the processing is necessary to protect someone’s life.

Public Task: the processing is necessary to perform a task in the public interest or your official functions, and the task or function has a clear basis in law.

Legitimate Interests: the processing is necessary for legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. 

Mobile Terms of Service

Good Food Project

Last updated: April 27, 2026

The Good Food Project mobile message service (the "Service") is operated by Good Food Project (“Good Food Project”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.

By consenting to Good Food Project’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Good Food Project through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Service-related messages may include updates, alerts, and information (e.g., order updates, account alerts, etc.). Promotional messages may include promotions, specials, and other marketing offers (e.g., cart reminders).

You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Good Food Project. Your participation in this program is completely voluntary.

We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.

You may opt-out of the Service at any time. Text the single keyword command STOP to GFPSMSALERT or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Good Food Project mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to GFPSMSALERT or email steve@goodfoodproject.co.uk.

We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.

The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.

To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.

We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.

How long do we keep your personal data

We process your personal data only for as long as necessary to achieve the purposes for which it was originally collected, for example, the duration of your Good Food Project account. For account users, if you instruct us to, we will delete your account and all of the personal data we process about you. Please email us at steve@goodfoodproject.co.uk to do so. For business clients, please contact us for more information.

Please note that on some occasions, we may retain elements of your personal information after our relationship has ended, where we are required to keep this data for as long as necessary to comply with our legal and regulatory obligations.

Who we share your data with

We may share your data with third parties for the purposes of fulfilling our commitment to you. These parties are known as our data processors. The data that we collect and receive from a customer is solely processed for the purposes of product provision, within the scope of this policy. Please note that we will never share or sell your data to a third party for commercial gain. We share data with third parties only when they provide part of the service to us:

• Good Food Project platform providers (subprocessors) for the purposes of managing your account beyond personal configuration. We use ZoHo Pagesense, ZoHo Salesiq, Zoho Campaigns, Zoho Forms and Google Analytics to help us provide our services to you;
• We use Zoho to send marketing communications and newsletters to you, and to host your data.
• We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

Payment Service Providers who assist us in processing your payment card details and transactions on our behalf, such as Stripe (PCI-DSS Compliant). Please note that any payment details you provide to us are processed directly on Stripe’s payment gateway and are not visible to anyone else, including us;

Technology service providers who host our information systems, backup servers or that offer us technological support, such as ZoHo CRM.

Administrative, judicial and/or legal authorities in response to requirements, as long as they are required in accordance with the applicable law and regulations;

Our legal advisors in the event a claim is presented in relation to our services and products;

In the event that we sell or buy any business or assets, in which case we may need to disclose your data to the prospective seller, buyer or business partner;

Where we use a third party or service provider to provide our Service to you, we enter into written agreements with them as sub-processors, including specific data processing terms with the same level of protection as afforded by us.

 

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
  
  
• Zoho Suite of Marketing, Analytics and Web Intelligence Software to help us understand how our customers use the Site. We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page here.

You can opt-out of targeted advertising by:

 

FACEBOOK - https://www.facebook.com/settings/?tab=ads

GOOGLE - https://www.google.com/settings/ads/anonymous
BING-https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads  

 

 

Links to other sites

Our website contains many links to third-party websites and services belonging to our Clients. This Privacy Policy does not apply to any links provided to You. Our Clients will appoint their own privacy policies and these should be consulted should you have any queries about how they process your data. We have no control over such third-party websites and have any responsibility for their actions.

 

Your rights

Any personal information you supply will be treated in accordance with applicable data protection laws including the GDPR (UK and EU) and any other applicable or superseding laws. We are committed to delivering the rights that individuals are entitled to and upholding a transparent approach in processing data. These are:

The right to access (data subject access request): You are entitled to request an electronic copy of the personal information we hold about you, stemming from the beginning of our relationship, within 30 days. To do this, please contact us at steve@goodfoodproject.co.uk to request a copy including full details of what you require. You may also be required to submit or demonstrate proof of your identity.

The right to object (right to be forgotten) to your personal information being used for certain purposes: Where required, we ensure we will obtain your consent before undertaking marketing and you will always have the ability to opt out at any time.

The right to rectification: You may request that we correct any inaccurate and/or complete any incomplete personal information. You may review, update, correct and add or delete your personal information in your account.

The right to withdraw consent: Where we are processing your personal information on the basis that you have given us your consent to do so, you may withdraw your consent at any time.

The right of erasure: You may request that we erase your personal information and we will comply, unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for retaining your personal information, such as a legal requirement to retain transaction data for a period of 6 years or to protect Good Food Project in any legal disputes.

The right to data portability: Under GDPR, in certain circumstances, you may request that we provide your personal information to you in a structured, commonly used and machine-readable format and have it transferred to another provider of the same or similar services to us. Where this right is applicable, we will comply with such transfer as far as it is technically feasible.

 

Other rights and responsibilities

• Good Food Project agree to fulfil their data privacy obligations, including the fulfilment of data subject right requests within the statutory One Calendar Month deadline;
  
  
• Access to your personal data is granted to Good Food Project staff who strictly require it to perform their employment duties. All personnel are subject to confidentiality responsibilities.
  
  
• We commit to ensuring that you will be notified in accordance with all applicable laws and regulations if a breach or unauthorised release of personal data occurs. We will notify you by email as permitted by law if it is determined that a data security incident occurred;
  
  
• Good Food Project will never require you, to disclose more information than is reasonably necessary to participate in an activity;
  
  
• Any such newsletter, marketing, or promotional email will only be sent after you confirm your consent to receive communications from us by opting in or providing consent and is used for all email marketing activities conducted by Good Food Project;
  
  
• From time to time, we need to send you service messages about important things, such as updates to our terms or privacy policy, or changes to our business. These cannot be opted out of as we need to keep you informed;
  
  
• If you have opted in to receive direct marketing from us and you have changed your mind (which you can do at any time), you may unsubscribe by just clicking on the unsubscribe link in the footer of any Good Food Project email which was sent to you. Another option is to contact us at steve@goodfoodproject.co.uk and make this request. We will honour your request and respond to you within a reasonable timeframe.

 

Contact Us

We suggest that you contact us about any questions or if you have a complaint in relation to how we process your personal information. You can reach us at steve@goodfoodproject.co.uk. However, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your Personal Data does not comply with legal requirements.

For UK citizens, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unsatisfied with our processing of your data (www.ico.org.uk). Good Food Project Ltd’ ICO registration number is ZB323873

A list of Data Protection Authorities within the European Union is available here:

 

 

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance, whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimise your experience on our Site and to provide our services.

[Be sure to check this list against Shopify’s current list of cookies on the merchant storefront: https://www.shopify.com/legal/cookies ]

Cookies Necessary for the Functioning of the Store

Reporting and Analytics

Name	Function	Duration
_landing_page	Track landing pages.	2w
_orig_referrer	Track landing pages.	2w
_s	Shopify analytics.	30min
_shopify_d	Shopify analytics.	session
_shopify_s	Shopify analytics.	30min
_shopify_sa_p	Shopify analytics relating to marketing & referrals.	30min
_shopify_sa_t	Shopify analytics relating to marketing & referrals.	30min
_shopify_y	Shopify analytics.	1y
_y	Shopify analytics.	1y
_shopify_evids	Shopify analytics.	session
_shopify_ga	Shopify and Google Analytics.	session

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools'' or “Preferences'' menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact Us

We suggest that you contact us with any questions or if you have a complaint in relation to how we process your personal information. You can reach us at steve@goodfoodproject.co.uk. However, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your Personal Data does not comply with legal requirements.

For UK citizens, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unsatisfied with our processing of your data (www.ico.org.uk). Good Food Project Ltd ICO registration number is ZB323873

A list of Data Protection Authorities within the European Union is available here: 

Last updated: 18/05/2022