Privacy policy

This policy explains what we do with your personal information, why we need it, and what you can ask us to do about it. We have tried to write it in plain English rather than legal boilerplate.

Who we are

This site is operated by NFB Retail Ltd, a company registered in England and Wales under company number 15704297, whose registered office is at Corun-Y-Bryn, Ffordd Uchaf, Gwynfryn, Wrexham, Wales, LL11 5UN, United Kingdom. We trade as frshnd.

For the information described in this policy, we are the data controller — we decide what is collected and why. You can reach us about anything on this page through our contact page.

What we collect, and why

When you place an order

Your name, email address, billing and delivery addresses, phone number if you give one, and what you ordered. We need this to take your money, send you your parcel and deal with you afterwards, so the lawful basis is performance of our contract with you.

We never see or store your full card number. Card details go directly to our payment provider, who is responsible for handling them securely.

When you message us

Your name, email address, the reason you picked, your message, and your phone number if you give one. We use it to answer you and to keep a record of what was said, on the basis of our legitimate interest in running a business that answers its customers.

When you subscribe to our emails

Just your email address, on the basis of your consent, which you can withdraw whenever you like.

When you create an account

Your login details and your order history, so you can see past orders without asking us. Basis: performance of our contract.

When you simply browse

Your IP address, device and browser type, and which pages you looked at. Some of this is necessary for the site to work at all; the rest is optional and we ask before setting it. See cookies below.

Who else sees it

We do not sell your personal information, and we never will. We share it only with the suppliers who help us run the shop, and only with what they need:

  • Shopify, which hosts this store and processes orders on our behalf.
  • Our payment providers — Shopify Payments, PayPal and Klarna — who take the payment and carry out fraud checks.
  • The carrier delivering your order, which needs your name, address and usually a contact detail for delivery notifications.

We will also disclose information where the law requires it, or to establish or defend a legal claim.

Where your information is held

Our suppliers, Shopify in particular, store and process information on servers outside the United Kingdom. Where that happens, the transfer is covered either by UK adequacy regulations or by standard contractual terms approved for use in the UK, so your information keeps the same protection it has here.

How long we keep it

  • Order and payment records — six years after the end of the tax year they fall in, because HMRC requires it.
  • Messages you send us — two years from our last exchange.
  • Newsletter subscriptions — until you unsubscribe, plus a record of the unsubscribe itself so we do not email you again by mistake.
  • Account details — until you ask us to close the account.

Your rights

Under UK data protection law you can ask us to:

  • give you a copy of the information we hold about you;
  • correct it if it is wrong;
  • delete it, where we have no continuing reason to keep it;
  • stop or limit how we use it;
  • send it to you, or to someone else, in a portable form;
  • stop using it where we have relied on our legitimate interests.

You can also withdraw consent at any time where we asked for it. Doing so does not make anything we did beforehand unlawful.

Ask through our contact page. It costs nothing, and we will respond within one month. If your request is genuinely complicated we may need longer, and we will tell you if so.

Marketing

We only send marketing email to people who asked for it. Every email has an unsubscribe link, it works immediately, and you can also just tell us. We will still email you about an order you have placed — that is part of selling you something, not marketing.

Cookies

Some cookies are necessary: they remember your basket and keep you signed in, and the site cannot work without them. Anything beyond that is optional, and we ask for your consent first. You can change your mind at any time using the Cookie preferences link at the bottom of any page, and your browser settings let you block or delete cookies entirely — though the shop may not work properly if you block the necessary ones.

Children

This shop is not aimed at children, and you need to be 18 to order from us. We do not knowingly collect information about children. If you believe a child has given us their details, tell us and we will delete them.

Complaints

If you are unhappy with how we have handled your information, please tell us first through our contact page — most things are quicker to put right directly.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator. Complaining to us first is not a precondition, and it does not affect any other legal remedy open to you.

  • Website: ico.org.uk/make-a-complaint
  • Helpline: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to this policy

If we change how we handle your information we will update this page, and the date below with it.

Last updated: 5 November 2026.