Last updated: 6 October 2026
[DRAFT — have this reviewed against the EU GDPR before relying on it. This is a plain-English starting point, not legal advice.]
The Living Field is operated by a cooperative registered in Portugal. Full company details will be published here shortly. We are the data controller for personal data collected through this site.
Name and email address (contact form, newsletter signup), order, delivery and billing details (processed by Stripe — we do not store full card details), and, only if you accept analytics cookies, anonymised data about how the site is used (pages visited, approximate location, device and browser type).
Online payments are handled by Stripe, after we confirm your order by email. Stripe's own privacy policy governs how they process your payment data: stripe.com/privacy.
To fulfil orders, respond to enquiries, send the newsletter (only if you opted in), and improve the site. Our legal bases are: performance of a contract (orders), legitimate interests (replying to enquiries, keeping the site secure), and your consent (newsletter and analytics cookies).
We use Google Analytics 4 to understand how visitors use the site. It sets analytics cookies only if you click Accept on the cookie banner; if you click Decline (or ignore it), no analytics cookies are set. Your choice is remembered on your device, and you can change it at any time by clearing this site's data in your browser, which brings the banner back. Google acts as a processor for this data and may process it outside the UK; see policies.google.com/privacy. The basket uses your browser's local storage to remember items you add; this stays on your device.
Under the EU GDPR you have the right to access, correct, or delete your personal data, and to withdraw consent for marketing at any time. Contact us via the contact page to exercise these rights.
We share personal data only with the services needed to run the shop: Stripe (payments), Netlify (website hosting and the contact form, which stores the details you submit), Brevo (sends our newsletter and welcome emails to people who sign up, and holds the email addresses on that list until you unsubscribe), and Google Analytics (only if you accept cookies). Some of these providers are based outside the UK and rely on recognised safeguards for international transfers.
We keep order and invoice records for as long as the law requires for tax and accounting purposes. Enquiries are kept only as long as needed to deal with them. Newsletter addresses are kept until you unsubscribe, and you can ask us to remove yours at any time. We never sell your data.
Questions about this policy can be sent via our contact page.