Privacy policy
Last updated 14 October 2026
This policy explains what personal information Golden Saffron Ltd collects through goldensaffron.co.uk, why we collect it, who we share it with and the rights you have over it.
Who we are
This website is run by Golden Saffron Ltd, a company registered in England & Wales and based in London. We import basmati rice, Ceylon tea, table olives and olive oil and supply them to the UK trade. Golden Saffron Ltd is the controller of the personal information described in this policy.
For any question about this policy or about your information, email us at info@goldensaffron.co.uk.
What we collect
If you send an enquiry through the form on our home page, we receive the details you enter: your name, your email address and the products you are interested in, plus your business name and a message if you add them. The form also has a hidden field that people never see. It is there only to catch automated spam.
If you email us directly, we receive your email address and whatever your message contains.
When you visit the site, our web server records technical details of each request, such as your IP address, the page asked for, the date and time, and your browser type. To stop the enquiry form being misused, the server also keeps a short record of the IP address and time of each enquiry, which it uses to limit how many enquiries can be sent from one address within 15 minutes.
We also use Google Analytics to understand how the site is used. Using the cookies listed below, it records the pages viewed, how visitors arrived at the site, and the type of device and browser and the approximate location they used. Google Analytics does not log or store IP addresses.
How we use it, and why we are allowed to
- To reply to your enquiry, send you our trade price list and deal with any trading relationship that follows. We rely on our legitimate interest in answering trade enquiries and running our business, and where you are a sole trader, on taking the steps you have asked for before entering into a contract.
- To keep the website and the enquiry form secure and working, which is what the server records and the limit on enquiries are for. We rely on our legitimate interest in protecting the site and our inbox from misuse.
- To understand how visitors use the site so that we can improve it, through Google Analytics. We rely on our legitimate interest in running a useful website.
We do not sell your information, and we do not make decisions about you by automated means.
Who we share it with
We use a small number of service providers who handle personal information for us, only on our instructions:
- Contabo GmbH, a German hosting company, runs the server this website is hosted on.
- Resend delivers the email that each enquiry sends to our inbox.
- IONOS hosts our email inbox.
- Google provides Google Analytics.
We will also disclose information if the law requires us to.
Transfers outside the UK
Our hosting provider is in Germany, and Resend and Google may process information in the United States. When information leaves the UK, we rely on the protections UK data protection law recognises for that transfer, such as UK adequacy regulations, which cover the European Economic Area and US companies certified under the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Addendum to the EU standard contractual clauses.
How long we keep it
- Enquiries and the emails that follow them: for as long as we need them to deal with your enquiry and any trading relationship that follows, and to meet our legal and accounting obligations. After that we delete them.
- The record used to limit enquiries is short-lived: entries older than 15 minutes are cleared the next time the form is used.
- Server logs: only for as long as we need them to keep the site secure and to fix problems.
- Google Analytics data: for the retention period set in our Google Analytics account, after which Google deletes it automatically.
Cookies
A cookie is a small file a website stores in your browser. This site sets the following:
- _ga, set by Google Analytics to tell one visitor's visits apart from another's. It expires after 2 years.
- _ga_F7QBT4T5JY, set by Google Analytics to keep track of the current visit. It expires after 2 years.
- An admin session cookie, set only when someone opens the site's private editing panel, which is for our own staff. It is removed when the browser is closed.
The site works the same without the analytics cookies. You can block or delete cookies in your browser's settings, and Google offers a browser add-on that turns Google Analytics off on every site: tools.google.com/dlpage/gaoptout.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- object to our use of it where we rely on legitimate interests, and object at any time to its use for direct marketing;
- ask us to pass information you gave us to you or to another organisation, where that right applies.
To use any of these rights, email us at info@goldensaffron.co.uk. There is normally no charge, and we will reply within one month.
Complaints
If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.
Changes to this policy
If we change this policy, we will publish the new version on this page and update the date at the top.