Legal

Privacy policy

Last updated: 5 November 2026

This explains what personal information Finest Fish Ltd collects when you use this website or buy from us, why we need it, who we share it with and the choices you have. We only collect what we need to run the shop, and we never sell your information.

1. Who we are

Finest Fish Ltd is responsible for your personal information (the “data controller” under UK data protection law).

Business: Finest Fish Ltd
Registered in England and Wales
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Email: support@finest.fish

For anything about your personal information, email us at support@finest.fish.

2. What we collect and why

When you place an order

Your name, email address, phone number, delivery address and what you bought. We use this to take payment, send your order, contact you about delivery (live animals need someone in to receive them), send your order confirmation and keep the records the law requires. Legal basis: to carry out our contract with you, and to meet our legal obligations (for example, tax records).

If you create an account

Your email address and password, plus the name, phone number and address you give us, so you can log in and see your past orders. Your password is stored scrambled (hashed) and we can never see it. Legal basis: to provide the account you asked for.

If you join our mailing list

Your email address and when you agreed, so we can send your welcome code and occasional emails about new arrivals and offers. You can unsubscribe at any time using the link in any email. Legal basis: your consent, which you can withdraw whenever you like.

If you ask us to tell you when something is back

Your email address and the product, so we can send you one email when it's back in stock. This does not add you to our mailing list. Legal basis: to do what you asked us to.

When you email us

Whatever you choose to tell us, so we can reply and help. Legal basis: our legitimate interest in answering customers.

When you browse the site

Like any website, our hosting provider briefly records technical information such as your IP address to deliver pages and protect the site from attacks. We also measure how fast our pages load using Vercel Speed Insights, which uses no cookies and does not identify you. Legal basis: our legitimate interest in running a secure, working website.

We also count visits with our own simple analytics, so we can see which pages and products people look at, how they found us and roughly where in the UK they are. It uses no cookies and stores nothing on your device. Your IP address is never stored: it is only used, together with your browser type, to make an anonymous code that changes every day, so we can count a visitor once a day without being able to recognise them over time. Location is recorded at town or city level only. Legal basis: our legitimate interest in understanding and improving the shop.

We don't use your information for automated decisions about you, and we don't sell it.

3. Payments

Payments are handled by Stripe on its own secure checkout page. Your card details go straight to Stripe and we never see or store them. Stripe uses your information to process the payment and prevent fraud, as described in Stripe's privacy policy. Stripe's checkout page may set its own cookies, which are needed for the payment and fraud checks.

Only with the companies that help us run the shop, and only what each one needs:

Stripe takes payments.
Supabase stores our database: orders, accounts, the mailing list and back-in-stock requests.
Vercel hosts the website.
Resend sends our emails (order confirmations, welcome codes and back-in-stock emails).
Our delivery courier receives your name, delivery address and phone number to deliver your order.

They act on our instructions and must keep your information secure. We will also share information if the law requires it, for example with HMRC or the police.

5. Where your information is stored

Our database is hosted in Switzerland, and our website runs on servers in Germany. Some of the companies above (Stripe, Vercel and Resend) are based in, or use services in, the United States. Where information leaves the UK, it is protected by the safeguards UK law requires, such as UK adequacy regulations (including the UK-US “data bridge”) or the UK's approved data transfer agreements.

6. How long we keep it

Orders: 6 years after the end of the tax year of the order, because the law requires us to keep business records.
Accounts: until you ask us to delete your account. Past orders are still kept for the period above.
Mailing list: until you unsubscribe. After that we keep only your email address and the date, so we never email you again by mistake.
Back-in-stock requests: deleted 90 days after we email you, or after 12 months if the product doesn't come back.
Emails you send us: as long as needed to deal with your question, and no more than 2 years.

7. Cookies and browser storage

We don't use advertising or tracking cookies, so you won't see a cookie banner. The site stores a few things in your own browser (“local storage”) that are needed for it to work:

what's in your basket, so it's still there if you come back;
that you're logged in, if you have an account;
your welcome code, if you signed up on this device, so checkout can fill it in for you.

You can clear these at any time in your browser settings. Stripe's checkout page sets its own cookies, as described in section 3.

8. Your rights

Under UK data protection law you have the right to:

get a copy of the personal information we hold about you;
have anything that's wrong corrected;
have your information deleted, unless we have to keep it by law (for example, order records);
object to, or ask us to limit, how we use it;
receive the information you gave us in a format you can take elsewhere;
withdraw your consent at any time, for example by unsubscribing from our emails.

To use any of these rights, email us at support@finest.fish. It's free, and we'll reply within one month. We may ask you to confirm your identity first.

If you're unhappy with how we've handled your information, please tell us so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Children

Our shop isn't aimed at children, and we don't knowingly collect information from anyone under 16. If you think a child has given us their details, email us and we'll delete them.

10. Changes to this policy

If we change how we use your information, we'll update this page and the date at the top. If a change is significant, we'll let affected customers know by email.