Privacy Policy

1. Who is responsible for your data

Avanti Foods Limited, trading as Wholesome Food and based in Ireland, is the data controller for the personal data described in this policy. Our registered address is 10 Block D, Monksland Business Park, Monksland, Co. Roscommon, N37 R2P4. We are registered in Ireland under company number 789657.

For any privacy question or request, contact privacy@wholesome.food.

2. What we collect and why

We only collect what we need for the purpose in question.

• Enquiries. When you use the contact form we collect your name, email address, and optionally your phone number, subject and message.
• Newsletter. If you subscribe, we collect your email address and a record of your consent.
• Orders. If you place an order, we collect your name, delivery and billing address, email address, phone number and order details. Card details are handled by our payment provider and are never stored by us.
• Technical data. Our hosting provider records standard server log information, including IP address, browser type and pages requested, to keep the site secure and available.

3. Our legal bases

• Contract (Art. 6(1)(b)). Processing orders, arranging delivery and handling returns.
• Consent (Art. 6(1)(a)). Sending marketing emails and setting any non-essential cookies. You can withdraw consent at any time without affecting processing carried out beforehand.
• Legitimate interests (Art. 6(1)(f)). Responding to enquiries, keeping the site secure and preventing abuse of our forms. We have considered your rights and do not believe this processing overrides them.
• Legal obligation (Art. 6(1)(c)). Keeping accounting and tax records, and meeting food safety traceability obligations.

4. Who we share it with

We do not sell personal data. We share it only with service providers who process it on our instructions under a written data processing agreement, including our website host, our email and form-handling provider, our payment provider and our delivery partners.

We may also disclose data where we are legally required to do so, for example to a regulator or in response to a valid legal request.

5. Transfers outside the EEA

Some of our providers operate outside the European Economic Area. Where that happens, we rely on an adequacy decision by the European Commission, or on Standard Contractual Clauses together with any additional safeguards required. You can ask us for details of the safeguards in place.

6. How long we keep it

• Enquiries: up to 24 months after your last contact with us.
• Newsletter subscribers: until you unsubscribe, plus a short suppression record so we do not email you again.
• Order and accounting records: as required by Irish tax law, currently six years.
• Server logs: a short rolling period set by our hosting provider.

7. Cookies

This site uses cookies and similar storage that are strictly necessary for it to function, including remembering your light or dark theme preference. Non-essential cookies, including analytics, are only set with your consent, and you can change or withdraw that choice at any time.

8. Your rights

Under the GDPR you have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent. You also have the right not to be subject to automated decision-making — we do not carry out any.

To exercise any of these rights, email privacy@wholesome.food. We will respond within one month.

9. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we will notify you and the supervisory authority of a personal data breach where the law requires it.

10. Complaints

If you are not satisfied with how we handle your data, you can complain to the Irish Data Protection Commission (dataprotection.ie), or to the supervisory authority in the EU country where you live or work.