Privacy Policy

Gleaned — formally Gleaned Organics ("we", "us") — monitors the online shops of UK certified organic farms and vineyards and tells account holders about genuine offers. This policy explains what personal data we hold about you and why.

What we collect

• Account details — your name (if you give one) and email address.
• Password — stored only as a salted cryptographic hash. We never store or see your actual password.
• Google sign-in — if you use "Continue with Google", Google shares your name and email address with us. We do not receive your Google password and cannot access anything else in your Google account.
• Marketing preference — whether you opted in to marketing email, and when.
• Preferences you choose to give us — household size, food categories you'd rather not see, and (entirely optionally) your age range and gender. These exist only to tailor which offers we show you and to size basket suggestions; every one of them can be left blank or changed later from the Preferences page.

What we use it for

• Running your account — signing you in, and sending service emails such as email verification and the offer digests the service exists to provide.
• Marketing email — only if you ticked the optional box when signing up (or opt in later). Every marketing email includes a way to opt out, or just reply and ask.

We do not sell or share your data with anyone for their own use, and we don't use advertising or analytics trackers.

Cookies

We set one essential cookie (oom_session) to keep you signed in for up to 30 days. No tracking cookies, no third-party cookies.

Where your data lives

The service runs on Netlify (hosting and data storage) and emails are sent via Google's Gmail service. Both act as our processors and may process data outside the UK under their standard safeguards.

How long we keep it

Your account data is kept while your account exists. Unverified accounts may be deleted after their verification link expires. Ask us to delete your account and we will remove your data.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it or delete it, and withdraw marketing consent at any time. To do any of these, contact us at the email address any of our emails come from. If you're unhappy with how we handle your data, you can complain to the ICO.