Free shipping on all UK orders over £30 Handcrafted in West Sussex, England

Privacy Policy

How we collect, use and protect your information

Last updated: 15 May 2026

Tide & Hive™ Ltd (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This policy explains what information we collect when you visit www.tideandhive.com, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. If you have any questions, contact us using the details at the bottom of this page.

1. Who we are

The data controller responsible for your personal data is:

Tide & Hive™ Ltd
West Sussex, United Kingdom
Email: support@tideandhive.com

2. What data we collect and why

Data Why we collect it Legal basis (UK GDPR)
Name & email address (newsletter sign-up) To notify you about our product launch and exclusive offers Consent (Art. 6(1)(a))
Name, email, phone, enquiry message (contact form) To respond to your enquiry Legitimate interests (Art. 6(1)(f))
Order details, delivery address, payment data (when purchasing) To process and fulfil your order Contract performance (Art. 6(1)(b))
IP address, browser type, pages visited (analytics) To understand how the website is used and improve it Legitimate interests (Art. 6(1)(f)) / Consent where required
Session data (cookies) To prevent abuse of forms (rate limiting) and maintain security Legitimate interests (Art. 6(1)(f))

We do not collect any special category data (such as health or biometric data).

3. Cookies and Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 uses cookies and similar tracking technologies to collect anonymised information about how visitors use this website. This may include:

  • Pages visited and time spent on each page
  • General geographic location (country/city level)
  • Browser type and device category
  • Referring website

This data is transmitted to and stored on Google’s servers. Google may also use this data in accordance with its own privacy policy. IP addresses are anonymised before transmission.

Your choice: Google Analytics is only loaded if you click Accept all or enable Analytics in our cookie banner on first visit. You can change your mind at any time using the link in the footer.

You can also opt out of Google Analytics across all sites by installing the Google Analytics Opt-out Browser Add-on.

For more information, see Google’s Privacy Policy.

We also set two small functional cookies to improve your browsing experience: ep_dismissed (expires after 7 days — remembers that you have closed our newsletter popup so it is not shown again for a week) and ep_subscribed (expires after 1 year — remembers that you have already subscribed so we never show the popup again). These cookies contain no personal data and do not require your consent under UK GDPR.

4. Google reCAPTCHA

Our contact and newsletter forms are protected by Google reCAPTCHA v3. reCAPTCHA collects hardware and software information (including device and application data) and sends it to Google to analyse whether an action is performed by a human or a bot. This processing is subject to Google’s Privacy Policy and Terms of Service.

To minimise data sharing, reCAPTCHA is only loaded when you start interacting with a form (focusing or tapping a field) — not on every page. We rely on it under the lawful basis of legitimate interest (preventing spam and abuse).

5. Amazon

We may sell our products via Amazon Marketplace (operated by Amazon EU S.àr.l. and Amazon Services Europe S.àr.l.). When you purchase through Amazon, your data is processed by Amazon under their own Privacy Notice. We receive only the order fulfilment data necessary to dispatch your goods (name, delivery address, and order reference). We do not receive your payment card details.

If we participate in the Amazon Associates affiliate programme, links to Amazon on our website may earn us a referral commission. No additional personal data is shared with us as a result of you clicking such links.

6. How we store and protect your data

Your data is stored securely on servers located within the United Kingdom and/or European Economic Area. We implement appropriate technical and organisational measures including:

  • HTTPS encryption on all pages
  • HTTP Strict Transport Security (HSTS)
  • Limited staff access on a need-to-know basis
  • Regular security reviews

Newsletter subscriber data is stored in a secure database on our web server. Contact form submissions are delivered by encrypted email (TLS) and are not stored on the server after delivery.

7. How long we keep your data

  • Newsletter subscribers: Until you unsubscribe, or we cease the service — whichever comes first.
  • Contact form enquiries: Up to 2 years from the date of enquiry, or as long as reasonably necessary to resolve your matter.
  • Order data: 7 years for financial records as required by HMRC.
  • Analytics data: GA4 data retention is set to 14 months.

8. Sharing your data

We do not sell your personal data. We may share it only with:

  • Google LLC — analytics (GA4) and spam prevention (reCAPTCHA)
  • Amazon EU S.àr.l. — where orders are placed through Amazon Marketplace
  • IONOS SE — our email delivery provider (SMTP)
  • Plesk / hosting provider — infrastructure on which the website runs
  • Law enforcement or regulatory authorities — where we are legally required to do so

Where processors are based outside the UK, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses or an adequacy decision).

9. Your rights under UK GDPR

You have the following rights regarding your personal data:

  • Right to access — request a copy of the data we hold about you
  • Right to rectification — ask us to correct inaccurate data
  • Right to erasure — request deletion of your data (“right to be forgotten”)
  • Right to restrict processing — ask us to limit how we use your data
  • Right to data portability — receive your data in a machine-readable format
  • Right to object — object to processing based on legitimate interests
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at support@tideandhive.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Newsletter unsubscribe

You may unsubscribe from our newsletter at any time by clicking the unsubscribe link in any email we send you, or by contacting us directly at support@tideandhive.com. We will process your request promptly.

11. Third-party links

Our website may contain links to third-party websites (including social media platforms). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

12. Children’s privacy

Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. The “Last updated” date at the top of this page will always indicate when it was last revised. Continued use of our website after any changes constitutes acceptance of the updated policy.

Questions about your privacy?

Contact us at support@tideandhive.com or use our contact form.

Tide & Hive™ Ltd · West Sussex, United Kingdom