Privacy Policy

Last updated: 20 October 2026

This notice explains how Casa Bene Ltd, company number 15594873, uses information collected through casabene.co.uk and enquiries sent to us. Our VAT registration number is GB 530 8829 79. Our registered office is Suite A, 82 James Carter Road, Mildenhall, England, IP28 7DE. Contact us at hello@casabene.co.uk.

Information you provide

Our enquiry form asks for your name, email address, subject and message. Email correspondence may include other details you choose to share. Providing these details is voluntary, but we need a contact address and information about your enquiry to respond. Please avoid sending sensitive personal information.

How we use it

We use your details to answer enquiries and communicate with you. We rely on our legitimate interests in handling correspondence and running our business, or taking steps at your request before entering into a contract where your enquiry concerns a purchase. Online payments are not yet available. Customer account features are being prepared and will become available once the account service is enabled.

Customer accounts and baskets

When accounts are available, we use your email address and name to create and manage your account, confirm your email and help you sign in. You can add, edit and remove delivery and billing addresses. Password authentication is handled by Supabase; we do not keep a readable copy of your password. An account is not a subscription to marketing emails.

We use account details, saved addresses and baskets to provide the account service you request and prepare purchases, relying on performance of our contract with you or steps you request before a purchase. We use necessary security information to protect accounts and our services, relying on our legitimate interests in preventing misuse. A guest basket stores product references and quantities in your browser for up to 30 days from your latest basket change. A signed-in basket is held with your account. See our Cookie Policy.

Checkout reviews validate your email, addresses, basket and confirmation that you are 18 or over. At this stage, a review does not create an order or take payment; entered checkout details remain in the open page and are sent securely to our server for validation, without being saved as an order. When purchasing is enabled, we will store the order total, purchased items, contact and delivery details, and Stripe payment reference for fulfilment and accounting. We do not collect or store full card numbers.

Payment and age checks

When we activate online sales, payments will be processed by Stripe through a secure embedded payment form. Stripe will process the payment information needed to take payment and prevent fraud. We will retain only payment references and necessary order records, not full card numbers.

We also plan to use Stripe Identity to verify that purchasers are at least 18 before payment. Stripe may request a government-issued photo ID and a matching selfie, and process images and date-of-birth information. Casa Bene will use the verification outcome and a short-lived secure browser cookie; we do not intend to download or store ID photographs or full birth dates. We will provide the provider-specific retention and any alternative verification details before activating this service. You may be asked to present suitable identification on delivery too.

Website and email services

The website is hosted by Vercel. When enabled, Supabase provides account authentication and the database for profiles, addresses, baskets and order records. Enquiry emails are delivered through Resend and handled in our Google email inbox. These services process information needed to host the site, deliver messages and protect their services, which may include IP addresses, browser details and technical logs. The website also loads fonts from Google Fonts and images from Unsplash, so your browser connects to those services when displaying the site.

These providers may process information outside the UK. Their published data protection terms describe their processing locations and international transfer arrangements: Vercel, Resend, Google and Unsplash Supabase and Stripe. Contact us with questions about the services used for your enquiry.

Keeping correspondence

The length of time correspondence is needed depends on whether your enquiry is resolved, whether follow-up or an ongoing business relationship is expected, and whether records are needed for legal obligations or disputes. You can contact us to ask about the information held in relation to your enquiry or request its deletion.

Account information

We keep your profile and saved addresses while needed to provide your account. You can edit your details and remove saved addresses in your account, or email us to request account closure or deletion. Removing a saved address does not change an existing order record. Where information must be retained for accounting, legal obligations or disputes, we keep only what is needed for those purposes. We will confirm any retention requirements relevant to a deletion request.

Your choices and rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information. You can object to processing based on legitimate interests by emailing us. Where processing relies on consent, you may withdraw it.

You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

This notice covers enquiries and the staged introduction of account and basket features. We will update it as the website and its services develop. For information about browser storage, see our Cookie Policy.