East Neuk Seaweed is a small business, and we treat your information the way we treat the shore: take only what is needed, and look after it. This notice explains what we collect, why, and your rights — in plain language. East Neuk Seaweed (Jayson Byles) of Bowhouse, St Monans, Anstruther KY10 2DB is the data controller. Last updated 25 August 2026.
What we collect, and why
- Bookings — when you book a workshop or buy a gift voucher, our booking partner FareHarbor collects your name, contact details, party details and payment. We receive the booking information we need to run your workshop; payment is processed by FareHarbor and we never see your full card details. Legal basis: performing our contract with you.
- Allergies & dietary needs — we ask at booking and again on the day, purely so we can feed you safely. This information is used only for running your workshop. Legal basis: your consent, and protecting your vital interests.
- Enquiries — if you contact us by form, email or phone we use your details to reply, and keep the correspondence as long as it stays useful. If you use the contact form we also record your IP address and an approximate location (see IP addresses & approximate location). Legal basis: our legitimate interest in answering you.
- Newsletter — if you sign up we store your email address and use it to send roughly one email a month. Every email includes an unsubscribe link, and unsubscribing removes you. When you sign up we also record your IP address and an approximate location (see IP addresses & approximate location). Legal basis: your consent.
IP addresses & approximate location
When you send the contact form or sign up to the newsletter, we also record the IP address the submission came from and look up the rough location it suggests (city, region and country). This helps us spot spam and abuse, and tells us roughly where enquiries and signups come from. To do the lookup, your IP address — and nothing else — is sent to our geolocation provider, ip-api.com. The result is approximate: it points to your internet provider’s equipment, not your doorstep. Both are kept alongside the enquiry or signup they arrived with, for the same period, and are used for nothing else. Legal basis: our legitimate interest in keeping our forms safe and knowing our audience.
Who we share it with
We never sell your data. It is shared only with the services that make the site and the business work: FareHarbor (bookings and payments — see the FareHarbor privacy policy), our website hosting provider, our email provider for newsletters and correspondence, and our geolocation provider ip-api.com, which receives only your IP address (never your name, email or message) when you use the contact or newsletter forms, and our analytics provider PostHog (anonymous usage data, as described under cookies below — see the PostHog privacy policy). Where a provider processes data outside the UK, they do so under recognised safeguards such as the UK’s data-bridge arrangements or standard contractual clauses.
Cookies & embedded services
This site sets no tracking cookies of its own. We use PostHog to understand how the site is used — pages viewed, browser type, and the rough location suggested by your IP address — and we run it in cookieless mode: it sets no cookies, stores nothing on your device, and we do not use it to identify you. Returning visitors simply look like new ones to us, and we are happy with that trade. Some pages embed third-party services that may set their own cookies when you use them: the FareHarbor booking window, and an embedded Google Map on our contact page. Links to Instagram, Facebook, TripAdvisor, YouTube and SoundCloud take you to those platforms, where their own privacy policies apply.
Photography at workshops
We occasionally photograph or film workshops for our gallery and social media. We will always ask before featuring you recognisably — and if you would rather not appear at all, just tell your guide on the day and we will keep you out of frame.
Children
Many of our workshops welcome children, but bookings are always made by an adult, and we collect children’s details (such as ages or allergies) only from the responsible adult, only for safely running the workshop.
How long we keep things
Booking and payment records are kept for six years, as UK tax law requires. Newsletter addresses are kept until you unsubscribe. Enquiries are kept only as long as they remain useful, then deleted.
Your rights
Under UK data protection law you can ask us at any time to access, correct or delete the information we hold about you, to restrict or object to how it is used, to receive it in a portable format, or to withdraw a consent you have given. Just get in touch — we will respond within a month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.