Privacy Policy
Last updated: 11 September 2026
1. About this Privacy Policy
The Big Cheese Store Ltd (“The Big Cheese”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit www.thebigcheese.store, purchase products from us, visit or contact our shop, sign up to receive marketing communications, contact us or otherwise interact with our business.
We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and other applicable privacy and electronic communications legislation.
Who are we
The data controller responsible for your personal information is: The Big Cheese Store Ltd 27 Broughton Street Edinburgh EH1 3JU United Kingdom Email: hello@thebigcheese.store Website: www.thebigcheese.store
2. Personal Information We Collect
The information we collect depends on how you interact with us and may include:
Identity information, such as your name and, where appropriate, the name of a person receiving an order or gift.
Contact information, including your postal address, delivery address, email address and telephone number.
Order and transaction information, including products purchased, order history, delivery instructions, transaction details, refunds and correspondence relating to an order.
Payment information. Payments may be processed securely by third-party payment providers. We do not ordinarily receive or store complete payment-card details.
Communications, including information you provide when contacting us by email, telephone, through our website, social media or in person.
Marketing preferences, including whether you have agreed to receive marketing communications and your communication preferences.
Technical and website information, such as IP address, browser and device information, website activity and information collected through cookies and similar technologies.
We aim to collect only the personal information reasonably necessary for the purposes described in this Privacy Policy.
3. How We Collect Your Information
Directly from you when you place an order, make a purchase, make an enquiry, create an account, subscribe to our mailing list or otherwise contact us.
When you use or browse our website.
When you visit or interact with our shop.
When you communicate with us through social media.
From payment, delivery and other service providers involved in completing your order.
From other sources where permitted by law.
Where somebody purchases a gift or arranges delivery to you, we may receive your name, delivery address and other information necessary to fulfil that order from the purchaser.
4. How and Why We Use Your Information
Orders and purchases
We use your information to process and fulfil orders, take and administer payments, arrange collection or delivery, provide order confirmations and delivery information, deal with cancellations, refunds and returns, and respond to questions concerning your purchase. Our lawful basis will generally be that processing is necessary to enter into or perform a contract with you.
Customer service and enquiries
We use information provided to us to respond to enquiries, requests, complaints and feedback and to provide customer support. Our lawful basis will normally be our legitimate interests in operating our business and providing effective customer service or, where an enquiry relates to an order or proposed purchase, taking steps to enter into or perform a contract.
Running and improving our business
We may use appropriate customer, transaction and website information to administer our business, understand how our products and services are used, improve our website and customer experience, maintain security and prevent fraud. Where appropriate, we rely on our legitimate interests for these purposes, taking into account your interests, rights and freedoms.
Legal and regulatory obligations
We may process and retain information where necessary to comply with legal, accounting, taxation or regulatory requirements. Our lawful basis for this processing is compliance with our legal obligations.
Marketing
Where permitted by law, we may use your contact details to tell you about products, tastings, events, promotions, news and offers from The Big Cheese. Where consent is required, we rely on that consent. You can unsubscribe at any time using the unsubscribe facility in a marketing message or by contacting hello@thebigcheese.store.
5. Sharing Your Information
We do not sell your personal information.
We may share personal information where reasonably necessary with trusted third parties that help us operate our business, including website and e-commerce providers, payment processors, delivery and courier companies, IT and hosting providers, email and marketing providers, analytics providers where applicable, accountants, professional advisers and insurers, and public authorities where disclosure is required by law.
Where a third party processes personal information on our behalf, we take appropriate steps to ensure that it handles that information securely and for the relevant purposes.
6. Payment Information
Payments made through our website may be handled by specialist third-party payment providers. The Big Cheese Store Ltd does not ordinarily store complete debit or credit card details. Payment providers process payment information in accordance with their own security and privacy requirements. This section should be reviewed once our online payment provider has been selected.
7. Cookies and Similar Technologies
Our website may use cookies and other storage and access technologies. Some may be necessary for the website and online shop to function. Others may support preferences, measurement, analytics or marketing. Where consent is required by law, technologies requiring consent will not be activated until you have made your choice. Please see our Cookie Policy for further information.
8. How Long We Keep Personal Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, taxation and reporting requirements. Retention periods depend on the nature of the information and why we hold it. When information is no longer required, we will delete it, anonymise it or otherwise dispose of it securely.
9. International Transfers
Some technology and service providers used to operate our website and business may process or store personal information outside the United Kingdom. Where personal information is transferred internationally, we will take appropriate steps to ensure the transfer complies with UK data protection law and appropriate safeguards are used where required.
10. Keeping Your Information Secure
We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Access is restricted to people and service providers with a legitimate need to use it. No internet transmission or electronic storage system can, however, be guaranteed to be completely secure.
11. Your Data Protection Rights
Depending on the circumstances, UK data protection law may give you rights to access your personal information, correct inaccurate information, request erasure, restrict processing, object to processing, receive certain information in a portable format and withdraw consent where processing relies on consent.
You have the right to object at any time to the use of your personal information for direct marketing.
To exercise a data protection right, contact hello@thebigcheese.store. We may need to verify your identity before dealing with a request.
12. Complaints
If you have concerns about how we use your personal information, please contact us first at hello@thebigcheese.store. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. Current information about making a complaint is available from the ICO.
13. Children
Our website and services are not specifically directed at children, and we do not knowingly seek to collect personal information from children for marketing purposes. If you believe a child has provided personal information to us inappropriately, please contact us.
14. Third-Party Websites
Our website may contain links to websites operated by third parties. We are not responsible for their privacy practices. We recommend reviewing the relevant third party’s privacy information before supplying personal information to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers or legal requirements. The latest version will be published on www.thebigcheese.store with an updated revision date.
16. Contact Us
The Big Cheese Store Ltd 27 Broughton Street Edinburgh EH1 3JU United Kingdom Email: hello@thebigcheese.store Website: www.thebigcheese.store