Legal
Privacy Notice
Last updated 4 September 2026
This privacy notice for Love Toast Limited describes how and why we collect, store, use and share your information when you use Toast Toasties — when you visit this website, download our brochure, or email us about supply.
This site has never had a privacy notice before. It is the wholesale side of the same business as our coffee shops, and this notice follows the same document they publish, corrected to what this site actually does. The short version is that this website has no form — there is nothing here to fill in, so it collects nothing you type. What it does do is measure how it is used, if you let it, and that is why a notice is needed at all.
Summary of key points
What personal information do we process? Nothing you type into this website, because there is nothing to type into. If you email us, we hold your email. If you allow it, we record how you use the site. Section 1.
Do we process any sensitive personal information? No. We do not ask for it and we do not knowingly hold it.
Do we receive any information from third parties? Our hosting provider tells us the country and city a visit came from. Nobody sends us anything else about you. Section 3.
How do we process your information? To reply to your enquiry and discuss supplying you, to understand how the site is used, and to keep it working. Section 2.
In what situations and with which parties do we share personal information? With the companies that host this site, hold its database and run our email — each named. Section 3.
How long do we keep it? Analytics and error records: 26 months, enforced by a nightly deletion job. Enquiries: 3 years. Section 5.
What are your rights? You can ask for a copy of what we hold, have it corrected or deleted, object to what we do with it, and complain to the Information Commissioner’s Office. Section 8.
How do you exercise your rights? Email hello@lovetoast.co.uk. That is the single address for every TOAST website. Section 13.
Table of contents
- What information do we collect?
- How do we process your information?
- When and with whom do we share your personal information?
- Do we use cookies and other tracking technologies?
- How long do we keep your information?
- How do we keep your information safe?
- Do we collect information from minors?
- What are your privacy rights?
- Controls for do-not-track features
- If you are enquiring on behalf of a business
- Do we make updates to this notice?
- How can you contact us about this notice?
- How can you review, update or delete the data we collect from you?
1. What information do we collect?
If you email us
This website has no contact form.The “get in touch” link opens your own email program with a message addressed to us. Nothing is submitted through this site — you send us an email, and we hold it as we would any other: your name, your address, your business, and whatever you write. Our email runs on Google Workspace.
If you download the brochure
The brochure is a plain file. You give us nothing to get it — no name, no email, no gate. We record that a download happened, as an anonymous event in our own analytics. We do not know who downloaded it.
Information collected automatically — our own analytics
Only if you allow it. Nothing below is recorded until you say yes when we ask — see section 4.
We do not use Google Analytics, a Meta Pixel or any third-party analytics product. We run our own, and it sends nothing outside our own systems. It records:
- a random identifier for your visit, generated in your browser and discarded when you close the tab — it is not linked to your name or email address;
- the pages you view;
- the website you arrived from, if it was an external one;
- any campaign tags in the link you followed;
- whether you are on a phone, tablet or desktop, and your window's width;
- how far down the page you scroll, at 25%, 50%, 75% and 100%;
- how long you are actively on the site;
- when you click something we have tagged for measurement — including the brochure download and the contact email link — which one and its visible text.
Our hosting provider adds your country and city, worked out from your IP address, and which browser you are using. Your IP address itself is not stored. The city and country derived from it are.
Information collected automatically — our error tracking
Only if you allow it, and only when something on the site actually breaks. This is our own system; no third-party error-reporting product is used. It records the error and its technical detail, the full address of the page you were on, including anything after the ?, your browser’s full user-agent string, the visit identifier above, and a trail of your last 20 actions before the error — the buttons and links you clicked, the pages you moved between, and the network requests the page made.
We are stating that plainly because it is more than a visitor would assume. It does not record anything you type.
Location
We do not ask your device for its location and this site has no feature that uses it. The only location we hold is the approximate town or city our hosting provider works out from your internet connection, and only if you allow analytics.
What we do not do
- No advertising or marketing trackers.
- No cookies of any kind set by us.
- No account, and no payment taken on this site.
- No form, so nothing you type is submitted here.
- We do not sell your information, and we do not share it for anyone else's advertising.
2. How do we process your information?
- To reply to you and to discuss supplying your business.
- To understand how this site is used — which sections get read, which links get followed, where people give up.
- To keep the site working — to find and fix the errors people hit.
- To comply with our legal obligations, and to establish or defend legal claims.
We do not send marketing from this website, because this website collects nobody for a mailing list. If we start, we will ask first and this notice will say so.
The law requires us to have a basis for each of those. Ours are:
| What we do | Our legal basis |
|---|---|
| Replying to an enquiry and discussing supply | Legitimate interests — responding to a business that contacted us — and taking steps before entering a contract |
| Storing the visit identifier on your device | Your consent, which you give or refuse when we ask, and can withdraw at any time |
| Analysing how the site is used, and diagnosing errors | Legitimate interests — improving and maintaining our own website |
| Keeping records to meet a legal obligation or defend a claim | Legal obligation, and legitimate interests |
3. When and with whom do we share your personal information?
| Who | What they receive | Their role |
|---|---|---|
| Vercel | Hosts this site and serves every page. Sees every request, and supplies the country and city described in section 1 | Our hosting provider, acting on our instructions |
| Supabase | Hosts the database holding the analytics and error records, and serves this site's images | Our database provider, acting on our instructions |
| Our email runs on Google Workspace, so an enquiry you send sits in our mailbox there | Acting on our instructions |
No advertising or analytics company receives anything from this site. We may share or transfer information as part of a merger, sale of company assets, financing or acquisition of all or part of our business.
Outside the UK. Some of the companies above are headquartered in the United States, so your information may be handled outside the UK. Where it is, it is protected by the safeguards UK data protection law provides for. We are not going to claim more than that here — the specific arrangement with each of them is something we are confirming.
4. Do we use cookies and other tracking technologies?
This site sets no cookies at all. Not for analytics, not for advertising, not functional ones. It stores two small items in your browser, which the law treats the same way cookies are treated: toast_consent, the choice you made when we asked, which lasts a year and holds nothing but that choice and its date; and toast_analytics_sid, the random visit identifier, stored only if you allow analytics and discarded when you close the tab.
How we ask. The first time you visit, a bar at the bottom of the page asks before anything non-essential runs. You can Accept, Reject, or set analytics and diagnostics separately. Both are off unless you turn them on — and off means the code is not loaded at all, not that we run it and discard the result.
Changing your mind.“Cookie preferences” in the footer of every page reopens that panel, and Withdraw & forget there deletes the stored choice and the visit identifier. Withdrawal takes effect immediately, without reloading. We ask again after a year, or sooner if what we are asking about changes. The complete list of what is stored is in our cookie and device storage notice.
5. How long do we keep your information?
| What | How long | Then |
|---|---|---|
| Enquiry emails you send us | 3 years | Deleted, unless you have become a customer and we need them for the trading relationship or for tax records |
| Website analytics | 26 months | Deleted |
| Error records | 26 months | Deleted |
| The visit identifier on your device | The current browser tab | Discarded by your browser when you close it |
The analytics and error periods are enforced, not just stated. A job runs every night and deletes what is past its period. We may keep something longer where the law requires it, or where it is needed for a legal claim already under way.
6. How do we keep your information safe?
We use appropriate technical and organisational security measures. However, no transmission over the internet and no storage technology can be guaranteed to be completely secure, so we cannot promise that unauthorised third parties will never defeat our security.
If personal information does go somewhere it should not, we have a written procedure for dealing with it, with a named person accountable and the deadlines the law sets.
7. Do we collect information from minors?
This is a business-to-business website and is not directed at children. We do not knowingly collect personal information from them, and there is nothing here to sign up to. If you believe we hold information about a child, email hello@lovetoast.co.uk and we will delete it.
8. What are your privacy rights?
Under UK data protection law you can ask us to:
- give you a copy of the personal information we hold about you;
- correct it if it is wrong, or complete it if it is missing something;
- delete it;
- stop or limit what we do with it;
- give it to you, or to somebody else, in a portable form;
- stop relying on legitimate interests, where you object to us doing so.
You have an absolute right to object to direct marketing at any time.
Withdrawing consent.Where we rely on your consent — the analytics and error tracking — you can withdraw it at any time through “Cookie preferences” in the footer. That does not affect anything done before you withdrew it.
Complaining. You can complain to the Information Commissioner’s Office — ico.org.uk, 0303 123 1113. We would rather you came to us first, at hello@lovetoast.co.uk, but you do not have to.
9. Controls for do-not-track features
Most browsers include a Do-Not-Track setting, and some now send a Global Privacy Control signal. No uniform standard for recognising these has been settled, and this site does not currently respond to either. In practice it makes little difference here: we ask you directly before any measurement runs, and nothing runs unless you say yes. If a standard is adopted that we should follow, we will follow it and update this notice.
10. If you are enquiring on behalf of a business
Most of what we hold from this site is about businesses rather than individuals — a company name, a delivery address, an order. That is not personal information and this notice does not need to cover it.
But the name, email address and phone number of a person at a business are still that person’s personal information, and this notice treats them that way. Everything above applies to you whether you wrote to us as yourself or as a buyer.
Our coffee-shop website and our franchise website each have their own notice covering what they do.
11. Do we make updates to this notice?
Yes. We may update it from time to time, and the updated version will be shown by a revised date at the top of this page. If we make material changes we will tell you, either by posting a notice or by contacting you directly.
12. How can you contact us about this notice?
Toast Toasties is operated by Love Toast Limited, a company registered in England and Wales under company number 12320925, whose registered office is at Unit 6, Cherrytree Farm, Blackmore End Road, Sible Hedingham, Halstead, Essex, CO9 3LZ. We are the data controller for the personal information described here, which means we decide how and why it is used.
The person accountable for data protection is Harley Pearson.
Write to us at hello@lovetoast.co.uk, or by post to Love Toast Limited at the registered office above.
13. How can you review, update or delete the data we collect from you?
Email hello@lovetoast.co.uk and tell us what you want. We will reply within one month, and there is no charge.
One address, for every TOAST website. We used to publish a different route on each site, and a request form hosted by an outside company. All of them are retired.
Everything in this notice was checked against what this website actually does on 4 September 2026.