Privacy Policy

Last updated: March 2026

The Spice Shelf ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using our website or purchasing from us, you agree to the practices described in this policy.

1. Information We Collect

Information you provide directly

When you place an order, subscribe, or contact us, we may collect:

• Full name and shipping address
• Email address
• Phone number
• Payment information (processed securely by Stripe, and we never store your card details)
• Any messages or communications you send us

Information collected automatically

When you visit our website, we may automatically collect:

• Browser type and device information
• Pages visited and time spent on the site
• Referring website or search terms
• IP address and general location

We use Google Analytics to understand how visitors use our site. Google Analytics collects anonymised usage data. You can opt out at tools.google.com/dlpage/gaoptout.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders
• Send order confirmations and shipping notifications
• Respond to your questions and customer service requests
• Send you newsletters and promotions if you have opted in
• Improve our website and product offerings
• Comply with legal obligations

We will never sell, rent, or trade your personal information to third parties for their marketing purposes.

3. How We Share Your Information

We share your information only with trusted service providers who help us operate our business:

• Stripe: payment processing. Their privacy policy is available at stripe.com/privacy.
• Cratejoy: subscription management. Their privacy policy is available at cratejoy.com/privacy.
• Whiplash / RyderShip: order fulfilment and shipping. Your name and shipping address are shared to deliver your box.
• Savory Spice Foodservice: our spice supplier receives your order details to prepare your box.
• Mailchimp: email marketing, only if you have subscribed to our newsletter.
• Zapier: automation platform that connects our services.

All service providers are contractually required to protect your data and use it only for the purposes we specify.

We may also disclose your information if required by law, court order, or to protect the rights and safety of our business or others.

4. Email Communications

If you subscribe to our newsletter, we will send you recipes, spice tips, new box announcements, and occasional promotional offers. You can unsubscribe at any time by clicking the unsubscribe link in any email we send. Transactional emails such as order confirmations and shipping notifications are not promotional and cannot be opted out of while you have an active order or subscription.

5. Cookies

Our website uses cookies to improve your experience. Cookies are small text files stored on your device. We use them to:

• Remember items in your shopping cart
• Analyse site traffic via Google Analytics
• Remember your preferences

You can disable cookies in your browser settings, though some features of the site may not function correctly without them.

6. Data Security

We take reasonable steps to protect your personal information from unauthorised access, disclosure, or loss. All payment information is encrypted and processed by Stripe, which is PCI DSS compliant. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are typically retained for seven years for tax and accounting purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the information we hold about you
• Correction: request that inaccurate information be corrected
• Deletion: request that we delete your personal information, subject to certain legal exceptions
• Opt-out: unsubscribe from marketing communications at any time
• Portability: request your data in a portable format

To exercise any of these rights, please contact us at hello@thespiceshelf.com. We will respond within 30 days.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your CCPA rights, contact us at hello@thespiceshelf.com.

10. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our site after changes are posted constitutes acceptance of the updated policy.

12. Contact Us