Legal
Privacy Policy
Last updated August 2026
Ffwng Apothecary Limited (“we”, “us”) is the data controller for personal data collected via ffwng.com. For any privacy question, contact hello@ffwng.com.
What we collect, why, and our lawful basis
- Enquiries & support messages (name, email, and the details you give us in general, trade or wholesale enquiries) — to respond and provide service. Basis: legitimate interests / contract.
- Newsletter email & marketing preferences — to send “The Ffwng Letter” if you opt in. Basis: consent.
- Device/IP and server logs — to run and secure the site. Basis: legitimate interests (security).
The site does not yet take online orders, so we do not collect account, order or payment data. This notice will be updated before the shop opens.
Who we share it with
Our processors, each under a data-processing agreement: Supabase (app data), Resend (email), Vercel (hosting). We do not sell your data. Where a processor is outside the UK, transfers are protected by appropriate safeguards.
Retention
We keep data only as long as needed: enquiry records for as long as we are dealing with your enquiry and a reasonable period after; marketing data until you unsubscribe.
Your rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability and objection, and to withdraw consent at any time. To exercise them, contact hello@ffwng.com. You can also complain to the ICO (ico.org.uk).
Security
Access controls on the systems that hold enquiry and newsletter data, and encryption in transit. No method of transmission is ever 100% secure.
Children
The site is not directed at, and our products are not sold to, under-18s.
Ffwng Apothecary Limited, registered in England & Wales. Company registration number, registered office and ICO registration to be confirmed.