Who we are

Spoon Cereals UK Ltd ("Spoon", "we", "us") is responsible for your personal data as the controller. We're a company registered in England and Wales, company number 8721747, with our registered office at Unit 4, Shortwood Court, Shortwood Business Park, Hoyland, Barnsley, S74 9LH 

This policy explains how we use your personal data when you visit spooncereals.co.uk, buy from us, subscribe, sign up to our emails, enter a competition, or get in touch with us.

Contact us

  • Email: spoon@spooncereals.co.uk
  • Post: Spoon Cereals, Unit 4, Shortwood Court, Shortwood Business Park, Hoyland, Barnsley, S74 9LH

Last updated: 19/10/2026

What personal data we collect

Information you give us

  • Your name, email address, phone number, and delivery and billing addresses
  • Your account details, order history and subscription preferences
  • Product reviews, survey answers and competition entries
  • Messages you send our customer service team, including on social media

We don't see or store your full card details. Payments are handled securely by our payment providers.

Information we collect automatically

When you use our site or open our emails, we use cookies and similar technologies to collect information such as the pages you view, the links you click, and the device and browser you use. We'll only access your location if you give us permission.

Information from other people

  • Payment providers confirm whether your payment went through
  • Social networks share information when you interact with us there, depending on your settings
  • Partner brands share entrant details when you enter a competition we run together
  • Review platforms such as Trustpilot share the reviews you leave about us

How we use your data, and our lawful basis

UK data protection law requires us to have a lawful basis for each way we use your data. Here's what we do and why.

What we use it for

Lawful basis

Taking, delivering and managing your orders and subscriptions

Contract

Running your online account

Contract

Answering your questions and complaints

Contract, or legitimate interests if you're not a customer

Sending marketing emails

Consent, or legitimate interests for existing customers (see Marketing)

Showing you tailored ads

Consent (through cookies)

Personalising the site and measuring how it's used

Consent (through cookies)

Running competitions and sending prizes or samples

Contract (the competition terms)

Asking for feedback and product reviews

Legitimate interests

Preventing fraud and keeping our site secure

Legitimate interests

Keeping tax and accounting records

Legal obligation

Where we rely on consent, you can withdraw it at any time by emailing spoon@spooncereals.co.uk, unsubscribing from our emails, or changing your cookie settings. Where we rely on legitimate interests, we've weighed our interests against yours, and you can object (see Your rights).

Marketing

We'll only send you marketing emails if you've signed up to our newsletter, or if you've bought from us and didn't opt out when we gave you the chance. Our emails may be tailored to you based on what you've bought and browsed.

You can unsubscribe at any time using the link in any email, by updating your account, or by emailing spoon@spooncereals.co.uk. You'll still get service messages, such as order and delivery confirmations.

Ads on other sites

You may see our ads on other websites and social media. With your consent, we use cookies to show ads to people who've visited our site. We may also share an encrypted (hashed) version of your email address with social networks such as Meta, so we can show ads to our customers or to people with similar interests. You can stop tailored ads by changing your cookie settings on our site and your ad settings on those platforms.

Who we share your data with

We never sell your personal data. We share it only with the suppliers who help us run Spoon, and only what they need to do their job.

Who

What for

Shopify

Running our website, online shop and customer accounts

[Payment providers, e.g. Shopify Payments, PayPal]

Taking payments

Recharge

Managing subscriptions

Klaviyo

Sending our emails

Our fulfilment partner and couriers [names]

Packing and delivering your orders

[Google Analytics]

Understanding how our site is used

[Meta, Google]

Advertising

Trustpilot

Collecting and publishing reviews

Partner brands

Sending prizes for competitions we run together. We'll name the partner in the competition terms

Professional advisers, e.g. accountants and lawyers

Running our business and meeting legal obligations

We may also share data with the police, regulators or other authorities where the law requires it, or to prevent fraud.

International transfers

Some of our suppliers, including Shopify, Klaviyo and Recharge, store or access data outside the UK, for example in the US, Canada or the EU. When that happens, we make sure your data stays protected. We do this either by relying on UK adequacy regulations for that country, or by using the UK's approved contract terms, such as the International Data Transfer Agreement or Addendum. You can ask us for more detail at spoon@spooncereals.co.uk.

Cookies

Cookies are small files saved on your device when you visit our site. Some are strictly necessary to make the site work, for example to keep items in your basket. We only use other cookies, such as analytics and advertising cookies, if you agree to them through our cookie banner.

You can change your choices at any time through your browser settings. Blocking some cookies may affect how the site works.

How long we keep your data

We only keep your data for as long as we need it, then delete it or make it anonymous.

Data

How long we keep it

Orders and transaction records

6 years after the end of the financial year, as HMRC requires

Your online account

Until you close it, then 2 years

Marketing email list

Until you unsubscribe. We then keep your email on a do-not-contact list so we don't email you again

Customer service messages

2 years after we last hear from you 

Competition entries

[6 months] after the competition closes

Analytics data

14 months

How we keep your data safe

We use trusted platforms with strong security, limit access to the people in our team who need it, and only work with suppliers who protect your data to the standard the law requires.

Your rights

Under data protection law, you have the right to:

  • Access: ask for a copy of the personal data we hold about you
  • Rectification: ask us to correct data that's wrong, or complete data that's incomplete
  • Erasure: ask us to delete your data in certain circumstances
  • Restriction: ask us to limit how we use your data in certain circumstances
  • Objection: object to us using your data based on legitimate interests. You can always object to direct marketing, and we'll stop
  • Portability: ask us to send the data you gave us to you or to another organisation, in certain circumstances
  • Withdraw consent: at any time, where we rely on your consent

We don't make decisions about you based solely on automated processing that have a legal or similarly significant effect.

To use any of these rights, email spoon@spooncereals.co.uk. It's free, and we'll respond within one month. If your request is complex, we may take up to two more months, and we'll tell you why within the first month.

How to complain

If you're unhappy with how we've used your personal data, you have the right to complain to us. You can contact us at spoon@spooncereals.co.uk, by post at the address above, or by messaging us on social media. You don't need to use any particular words or form.

We'll acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome.

You can also complain to the UK data protection regulator, the Information Commission (known as the ICO):

Children

Our website isn't aimed at children under 16, and our competitions are only open to people aged 18 or over. We don't knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top. If we make a significant change, we'll let you know.