Homegrown Private Ltd, trading as Homegrown, respects your privacy and is committed to protecting your personal information. This page explains what we collect, why, how long we keep it, who we share it with, and the rights you have under UK data-protection law.
Homegrown Private Ltd, trading as Homegrown, respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you visit or use the Homegrown website, create a customer account, place an order, contact our customer-service team, subscribe to marketing communications, participate in a promotion or survey, or interact with us through email, telephone, social media or another official channel.
This policy also explains your rights under applicable UK data-protection law.
For the purposes of UK data-protection law, the data controller is:
Homegrown Private Ltd, trading as Homegrown
Email: hello@homegrown.com
Contact address: 3 Waltham Avenue, Hayes, UB3 1TA, England
As the data controller, Homegrown decides why and how your personal information is processed.
We process personal information in accordance with applicable UK data-protection and electronic-communications legislation, including:
The personal information we collect depends on how you interact with us.
Payments may be processed by third-party payment providers. Depending on the payment method, the payment provider may collect card or bank details, billing information, payment authentication information and fraud-prevention information.
Homegrown may receive limited payment information, such as payment status, transaction reference, payment method, amount paid and limited billing details. We do not intentionally request that customers send full payment-card details by email, social media or other unsecured communication methods.
Where customer accounts are available, we may collect account login details, saved addresses, purchase history, product preferences, account settings and marketing preferences. Passwords may be stored in an encrypted or protected form by our website or account-service provider.
When you contact us, we may collect emails and messages, complaint details, telephone-call notes, photographs or videos, damaged-product evidence, delivery information, return and refund requests, batch numbers and best-before dates, details of how a product was stored or used, and the outcome of your enquiry or complaint.
When you use our website, we or our service providers may collect your IP address, browser and device type, operating system, screen resolution, language settings, approximate location based on IP address, pages viewed, links selected, time spent on pages, referring website, session information, shopping-basket activity, error and security logs, and cookie or similar-technology identifiers.
Where applicable, we may collect newsletter subscription status, marketing preferences, responses to promotions, email engagement information, advertising interactions, product interests, and records of marketing consent or unsubscribe requests.
If you contact or interact with Homegrown through a social-media platform, we may receive your profile name, publicly available profile information, messages and comments, photographs or videos you submit, and information about your interaction with our content. The relevant social-media provider separately controls how it processes information through its platform.
You may voluntarily provide information about an allergy, intolerance, adverse reaction, medical concern or food-safety incident when contacting us. This information may constitute sensitive or special-category personal information, so please provide only what's reasonably necessary for us to investigate your concern.
Information you provide when you place an order, create an account, complete a website form, subscribe to marketing, contact customer service, submit a review, enter a promotion, request a return or refund, or report a damaged or unsafe product.
Technical and website information collected through cookies, server logs, analytics tools, pixels, tags, local-storage technologies, fraud-prevention tools and website-security systems.
Payment providers, delivery companies, website and hosting providers, ecommerce service providers, customer-support systems, email and communication providers, fraud-prevention services, analytics and advertising providers, and marketplaces through which our products are sold.
Where lawful and relevant: Companies House, fraud-prevention databases, public business directories, public social-media profiles, and regulatory or law-enforcement bodies.
We use personal information only where we have an appropriate lawful basis.
To confirm your order, process payment, prepare and pack products, arrange delivery, provide delivery updates, process refunds and replacements, and communicate about the order. Our lawful basis is generally that processing is necessary to perform our contract with you.
To respond to enquiries, investigate complaints, resolve delivery problems, process returns and refunds, investigate product-quality concerns, and maintain records of customer-service interactions. Our lawful bases may include contract performance, legal obligations and our legitimate interests in providing effective service.
To investigate food-safety concerns, identify affected batches, contact customers regarding a safety issue, manage withdrawals or recalls, report matters to authorities, improve manufacturing and quality control, and establish or defend legal claims. Our lawful bases may include legal obligation, legitimate interests, vital interests, and the establishment, exercise or defence of legal claims.
To operate website functions, maintain security, detect errors, prevent misuse, understand performance, improve navigation, and remember permitted preferences. Our lawful bases may include legitimate interests and consent where legally required.
To verify transactions, detect suspicious activity, prevent fraudulent orders, protect customer accounts, maintain security, enforce our Terms and Conditions, and protect our legal rights. Our lawful bases may include legitimate interests, legal obligation, and the establishment, exercise or defence of legal claims.
To maintain transaction records, prepare company accounts, complete tax returns, respond to legal requests, cooperate with regulators, comply with food-traceability requirements, and establish or defend legal claims. Our lawful basis is compliance with legal obligations and, where applicable, our legitimate interests.
We may send essential communications about orders, payments, delivery, returns, refunds, product availability, account security, customer-support enquiries and product-safety notices. These are service communications rather than marketing messages, based generally on contract performance, legal obligation or legitimate interests.
Where legally permitted, we may use your contact information to send product news, special offers, discount information, new-product announcements and relevant Homegrown updates. Our lawful basis may be your consent, our legitimate interests, or the existing-customer "soft opt-in" exception where all legal conditions are met.
You can unsubscribe at any time using the unsubscribe option in a message or by emailing us. Opting out of marketing does not prevent us from sending essential order, safety, account or service communications.
Cookies and similar technologies are files or identifiers used by websites to operate features, remember choices, understand usage and support advertising. We may use the following categories:
| Category | What it's for |
|---|---|
| Strictly necessary | Keeping the site secure, operating the basket and checkout, remembering privacy choices, maintaining sessions, preventing fraud. May operate without consent where the site cannot function properly without them. |
| Preference | Remembering settings such as language, region, display and account preferences. |
| Analytics | Understanding how visitors use the website, popular pages, errors, navigation patterns and performance. |
| Advertising | Measuring advertising performance, limiting repeated ads, showing more relevant advertising, and understanding whether an ad led to a visit or purchase. |
We request consent for non-essential cookies and similar technologies where consent is legally required. You can manage your choices through our cookie banner or settings facility, or through your browser — though blocking necessary cookies may affect how the site works. Further details may be provided in a separate Cookie Policy or cookie settings page.
We may share personal information with organisations that help us operate our business:
Homegrown does not sell or rent customers' personal information to third parties. We may use service providers that process information on our behalf or for their own stated purposes, as explained in this policy.
Some of our service providers may store, access or process personal information outside the United Kingdom. Where a restricted international transfer takes place, we use an appropriate legal safeguard where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard or exception permitted by law.
You may contact us for further information about the safeguards applying to relevant international transfers.
We retain personal information only for as long as reasonably necessary for the purpose it was collected for, including legal, accounting, tax, food-safety and dispute-resolution requirements.
| Type of information | Typical retention |
|---|---|
| Orders & transaction records | Up to six years after the relevant transaction or financial period, or longer where required by law or an ongoing dispute. |
| Customer-service & complaint records | Up to six years after resolution, depending on the matter. Food-safety and traceability records may be kept longer where required. |
| Customer accounts | While the account remains active; after closure, kept only where necessary for transaction records, fraud prevention or legal/regulatory compliance. |
| Marketing information | Until you unsubscribe, withdraw consent, or successfully object. Limited suppression data may be kept to honour your opt-out. |
| Website & cookie information | According to the lifespan of the relevant cookie, system or service — see our cookie settings or Cookie Policy. |
| Security & fraud information | For a period reasonably necessary to protect customers, investigate incidents and prevent repeated misuse. |
We securely delete or anonymise information when it is no longer required.
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, misuse, unlawful disclosure or destruction. Measures may include access restrictions, password controls, secure website connections, encryption where appropriate, security monitoring, backups, staff confidentiality requirements, service-provider checks and incident-response procedures.
Where a personal-data breach occurs, we will investigate the incident, take appropriate steps to limit harm, maintain required records, notify the Information Commissioner's Office where legally required, and inform affected individuals where the law requires us to do so.
Depending on the circumstances, you may have the following rights:
To exercise a data-protection right, email hello@homegrown.com and please state clearly your name, contact details, the right you wish to exercise, the information or time period concerned, and any relevant order or account reference.
We may request reasonable information to verify your identity before releasing or changing personal information. We will normally respond without undue delay and within one month of receiving a valid request and any information reasonably needed to verify or clarify it. For a complex request or multiple requests, the response period may be extended where permitted by law, and we will tell you where an extension applies.
Data-protection requests are normally handled without charge. A reasonable fee may be charged, or a request refused, where the law permits this because a request is manifestly unfounded or excessive.
You may stop receiving marketing communications at any time by selecting the unsubscribe option in a marketing email, following the opt-out instructions in a message, or contacting us directly. We will process the request as soon as reasonably possible.
You may continue to receive essential communications concerning existing orders, payments, delivery, refunds, safety notices or customer-service matters.
You may make a data-protection complaint if you believe we have not handled your personal information correctly. Please include your name and contact information, a description of your concern, relevant dates, any order, account or complaint reference, copies of relevant correspondence, and the outcome you're requesting.
We will provide a clear way for you to submit a complaint, acknowledge it within 30 days, take appropriate steps to investigate, keep you reasonably informed, and communicate the outcome once our investigation is complete. We may request further information where reasonably necessary.
We would appreciate the opportunity to resolve your concern first. You also have the right to complain to the Information Commissioner's Office, the independent UK regulator responsible for data-protection law. You can find the current complaint process and contact options through the Information Commissioner's Office.
Making a complaint to us does not remove your right to contact the regulator or seek another remedy available under law.
Our website is intended for use by adults purchasing products for themselves or their households. Orders must be placed by a person legally capable of entering into a contract. We do not knowingly collect personal information directly from children for marketing purposes.
If you believe that a child has provided personal information to us without appropriate authorisation, please contact us so we can remove it.
Our website may contain links to social-media platforms, payment providers, delivery providers, marketplaces and other third-party websites. Third-party organisations are responsible for their own privacy practices. We recommend reviewing the privacy notice of any external website or service before providing personal information.
If you submit a product review, photograph, video or testimonial, we may process your name or chosen display name, review content, product rating, photographs or videos, date of submission, and related order information.
We may publish content where you have submitted it for publication or otherwise authorised its use. Please do not include unnecessary personal information about yourself or another person in publicly submitted content.
We may update this Privacy Policy to reflect changes to our website, service providers, products or services, business practices, legal or regulatory requirements, or new data-processing activities. The updated policy will be published with a revised "last updated" date.
Where a change materially affects how we use personal information, we will take reasonable steps to provide additional notice where legally required.
For privacy questions, data-protection rights or complaints, contact:
Homegrown Private Ltd, trading as Homegrown
Email: hello@homegrown.com
Contact address: 3 Waltham Avenue, Hayes, UB3 1TA, England
Our team replies to most messages within 24 hours.
Usually replies in a few minutes