Privacy policy

Privacy and Cookie Policy

Last updated: 26 August 2026

1. Who we are

This website is operated by Gresham IND Ltd, trading as SeedySide. We are the data controller for the personal data described in this policy.

  • Registered address: 31 Gresham Street, Belfast, BT1 1JL, Northern Ireland
  • Company registration number: NI663460
  • Email: info@seedyside.co.uk
  • Telephone: +44 330 223 3369

This policy explains what we collect, why, who we share it with and what you can do about it. It is written to comply with UK GDPR and, for customers in the EU, EU GDPR.

2. What we collect

  • Order and contact details: name, billing and delivery address, email, phone number, and what you bought.
  • Payment details: handled entirely by our payment providers. We never see or store your full card number, and we never hold your online banking credentials.
  • Account details: if you create an account, your email and a hashed password. We cannot read your password.
  • Age confirmation: a record that you confirmed you are 18 or over, and any age verification checks we carry out.
  • Technical data: IP address, browser and device type, and cookie identifiers.
  • Communications: emails, calls and messages you send us, and our replies.

3. Why we use it, and our legal basis

  • To fulfil your order and deal with returns, refunds and queries. Legal basis: performance of a contract.
  • To verify you are 18 or over and to keep records of that. Legal basis: legal obligation, and our legitimate interest in selling age restricted goods responsibly.
  • To meet tax and accounting obligations. Legal basis: legal obligation.
  • To prevent fraud and to keep the site secure. Legal basis: legitimate interests.
  • To improve the site and understand how it is used. Legal basis: legitimate interests, or consent where analytics cookies are involved.
  • To send marketing emails. Legal basis: consent, which you can withdraw at any time.

4. Who we share it with

We do not sell your data. We share it only with providers who need it to run the business, and only to the extent they need:

  • Shopify Inc. hosts this store, processes orders and provides checkout.
  • ApcoPay processes card payments, with Trust Payments acting as the underlying payment processor and acquirer.
  • Boodil processes bank transfer and open banking payments, which involves passing you to your own bank to authorise the payment.
  • DPD and other carriers, who receive the name, delivery address, email and phone number needed to deliver your parcel.
  • Email and marketing providers, for order confirmations, dispatch notifications and, where you have consented, marketing.
  • Analytics providers, where you have accepted analytics cookies.
  • Professional advisers, auditors and authorities, where we are legally required to disclose.

Each of these acts under a contract that restricts what they can do with your data.

5. Payment data in more detail

When you pay by card, you are handed to a secure payment page operated by our payment provider. Your card details go straight to them and never touch our systems. We receive back only a confirmation, the last four digits and the card type.

When you pay by bank transfer, you are handed to your own bank or banking app to approve the payment. We never see your banking login, and neither does anyone acting for us.

6. International transfers

Some of our providers process data outside the UK and EEA. Where that happens, the transfer is covered by UK or EU adequacy decisions, or by standard contractual clauses with appropriate additional safeguards. You can ask us which mechanism applies to a specific provider.

7. How long we keep it

  • Order and transaction records: six years from the end of the financial year, for tax purposes.
  • Age verification records: as long as we are required to evidence the check.
  • Account data: until you ask us to close the account.
  • Marketing consent: until you withdraw it, and a suppression record after that so we do not email you again by mistake.
  • Analytics data: typically 14 months.

8. Your rights

You can ask us to:

  • give you a copy of the data we hold about you
  • correct anything inaccurate
  • delete your data, where we are not required to keep it
  • restrict or object to how we use it
  • send your data to another provider
  • stop sending you marketing, at any time

Email info@seedyside.co.uk and we will respond within one month. There is no charge.

If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk, or to your national data protection authority if you are in the EU. We would rather you came to us first so we can put it right.

9. Security

The site runs over encrypted connections throughout. Access to customer data is limited to staff who need it. Payment card data never reaches our systems, which removes the largest single risk.

10. Marketing

We only send marketing emails to people who have asked for them. Every email has an unsubscribe link, and you can also just reply and tell us to stop. Unsubscribing does not affect order confirmations or dispatch notifications, which we have to send.

11. Cookies

Cookies are small files placed on your device when you visit. We use four kinds:

  • Essential: needed for the basket, checkout, login and security. These cannot be switched off.
  • Analytics: tell us which pages are used and where people get stuck.
  • Preference: remember your settings between visits.
  • Marketing: used to show relevant advertising. Only set if you consent.

You will see a consent banner on your first visit, and you can change your mind at any time through the banner or your browser settings. Blocking essential cookies will stop checkout working.

12. Age of users

This site is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

13. Changes

We update this policy when our practices or providers change. The date at the top tells you when it last changed.

14. Contact

  • Gresham IND Ltd, trading as SeedySide
  • 31 Gresham Street, Belfast, BT1 1JL, Northern Ireland
  • Email: info@seedyside.co.uk
  • Telephone: +44 330 223 3369

See also our terms and conditions, returns policy and delivery information.