privacy policy

Last updated: 14/03/2026

This Privacy Policy explains how Soup (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit this website, contact us, place an order, or sign up to our newsletter.

We are committed to handling personal data with care, transparency, and respect.

For any questions about this Privacy Policy or the way your data is handled, please contact us at:

Business name: [insert legal business name]

Email: [insert email address]

Address: [insert business address]

VAT number: [insert VAT number, if applicable]

1. What information we collect

We may collect and process the following personal data:

  • your name

  • your email address

  • your phone number

  • your billing and shipping address

  • payment-related information needed to process orders

  • order details and purchase history

  • communications you send to us by email, contact form, or other direct contact

  • technical information such as IP address, browser type, device information, and website usage data

  • marketing preferences, where you choose to receive updates from us

2. How we collect your data

We collect personal data when you:

  • place an order

  • contact us by email or through a contact form

  • request information about an item

  • sign up to our newsletter

  • browse or interact with the website

  • otherwise provide information to us directly

Some information may also be collected automatically through cookies or similar technologies used on the website.

3. How we use your data

We use your personal data to:

  • process and fulfil orders

  • arrange shipping, delivery, or collection

  • respond to enquiries and customer service requests

  • provide information about items, sourcing, appointments, or purchases

  • manage payments, invoicing, and business records

  • improve the website, user experience, and our services

  • send newsletters or marketing communications where you have chosen to receive them

  • comply with legal, tax, and accounting obligations

Under EU data protection rules, personal data processing should be tied to clear purposes and follow principles such as lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. 

4. Legal basis for processing

Depending on the situation, we process your personal data on one or more of the following grounds:

  • to perform a contract with you, such as fulfilling an order

  • to comply with legal obligations

  • for our legitimate interests in running and improving our business and website

  • on the basis of your consent, where required, such as for email marketing

5. Newsletter and marketing

If you sign up to our newsletter, we may use your email address to send updates about new arrivals, projects, events, or other relevant news from Soup.

You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us directly.

6. Sharing your data

We only share personal data where necessary and appropriate. This may include:

  • payment providers

  • shipping and delivery partners

  • website, hosting, ecommerce, or newsletter service providers

  • accountants, legal advisers, or other professional service providers

  • public authorities where required by law

We do not sell your personal data to third parties.

7. International transfers

Some of the service providers we use may process data outside the European Economic Area. Where this happens, we aim to ensure that appropriate safeguards are in place in line with applicable data protection law. The GDPR provides mechanisms for such transfers, including adequacy decisions and standard contractual clauses. 

8. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to fulfil orders, maintain business records, comply with legal obligations, and resolve disputes.

If you subscribe to our newsletter, we keep your contact details until you unsubscribe or ask us to remove them, unless we are required to retain certain records by law.

9. Your rights

Depending on your location and the circumstances, you may have the right to:

  • access the personal data we hold about you

  • request correction of inaccurate or incomplete data

  • request deletion of your personal data

  • request restriction of processing

  • object to certain processing

  • request transfer of your data where applicable

  • withdraw consent where processing is based on consent

  • lodge a complaint with a supervisory authority

EU data protection law gives individuals rights over their personal data, and privacy notices are expected to explain how data is used and whom to contact about it. 

10. Cookies and website analytics

This website may use cookies and similar technologies to ensure the website functions properly, understand how visitors use the site, and improve performance and user experience.

Where required, you will be given the option to manage your cookie preferences. More detail can be provided in a separate Cookie Policy if needed.

11. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, but we aim to handle personal data responsibly and with appropriate safeguards.

12. Third-party services and links

This website may contain links to third-party websites or use third-party services such as payment processors, newsletter tools, maps, embedded content, or social media features. We are not responsible for the privacy practices of third-party websites or platforms, and we encourage you to review their policies separately.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or website functionality. The most current version will always be posted on this page with the updated date shown above.

14. Contact

If you have any questions about this Privacy Policy or would like to exercise your rights, please contact:

Soup

[insert legal business name]

[insert email address]

[insert business address]

[insert phone number, optional]