Privacy Policy

Pysk Ltd (company number 12558630) operates this website. Our registered address is 2 Tidemill House, Discovery Quay, Falmouth, England, TR11 3XP.

When we say “we,” “us,” or “Pysk” in this policy, we mean Pysk Ltd. We are the data controller for the personal information described below.

We collect only what we need to fulfil your order and run our shop:

• Contact details — your name, email address, and phone number, provided at checkout.
• Delivery address — if you choose delivery rather than collection.
• Order history — what you ordered, when, and the amounts paid.
• Phone verification — if you create an account, we verify your phone number via a one-time code.
• Payment information — card payments are processed securely by Square. We never see or store your full card number.
• Event and workshop interest — if you register interest in something we are planning, such as a filleting workshop, we keep your email address and, only if you choose to give one, a phone number. The phone number is optional.

We do not send marketing SMS, and we do not use your phone number for general marketing. A phone number given at checkout or on your account is used only for order-related communication and account verification.

There are two exceptions, both of which only happen because you asked. One is a number you give us when registering interest in an event or workshop, so we can ring or text you about that event — for example to ask which dates or price would suit you. The other is if you tick the box to join our mailing list by text. Both are described under “Text messages” below, and you can stop either at any time.

• To process and fulfil your orders.
• To contact you about your order (e.g. confirming collection times, delivery updates, or if we need to discuss a substitution).
• To send you a confirmation email when you place an order.
• To comply with legal obligations (e.g. tax records, food safety traceability).
• To send you marketing emails about our products, news, and offers — only if you have specifically signed up to receive them.
• To show our adverts to you, and to reach new people similar to you, on Facebook and Instagram — only if you have signed up to hear from us (see “Social media advertising” below).
• To contact you about an event or workshop you registered interest in — including asking what timings, price and content would suit you, so we can plan it around the people who want to come. We use this only for the event you asked about.

We do not sell your data.

If you sign up to our newsletter or marketing list (separately from placing an order), we will send you marketing emails. You can unsubscribe at any time using the link in any marketing email.

We process your data on the following bases under UK GDPR:

• Contract — processing your order and delivering your goods.
• Legal obligation — keeping records for tax and food safety purposes.
• Legitimate interest — improving the website experience.
• Consent — sending you marketing emails, where you have specifically opted in (e.g. via our website signup form).
• Consent — contacting you by email, phone or text about an event or workshop you registered interest in. This is separate from marketing consent: agreeing to hear about a workshop does not put you on our marketing list, and you can withdraw it without affecting anything else.

We share your information only with the services we need to run the shop:

• Square — payment processing, order management, and customer records.
• Courier services — name and delivery address for national delivery orders.
• Microsoft 365 — to send order confirmation and notification emails.
• Klaviyo — we use Klaviyo (a US-based email and text marketing platform) to send marketing emails and text messages and to manage our subscriber lists. If you sign up to our marketing list, your email address and engagement data are processed by Klaviyo on our behalf. International data transfers to the US are covered by the EU–US Data Privacy Framework (UK extension), which Klaviyo is certified under. If you register interest in an event or workshop, your email address is held in a separate Klaviyo list kept apart from our marketing list, so the two are not mixed. Phone numbers given for an event are not sent to Klaviyo.
• Google Analytics — we use Google Analytics 4 to understand how visitors use our website. This collects anonymised usage data. You can opt out via our cookie banner.
• Meta — we use the Meta (Facebook) advertising pixel to measure the effectiveness of our advertising. This only operates after you give consent via our cookie banner.

All third parties process data on our behalf and are bound by their own privacy policies and data protection obligations.

We use Meta Platforms Ireland Ltd (“Meta” — the company behind Facebook and Instagram) to show our adverts to our customers and to people who are likely to be interested in Pysk. To do this, we may share a “hashed” (scrambled and non-readable) version of contact details you have given us — such as your email address and, where we hold it, your phone number — with Meta. Meta matches this against its own users so that we can:

• show our adverts to you on Facebook and Instagram (“Custom Audiences”); and
• reach new people who share characteristics with our existing customers (“Lookalike Audiences”). Lookalike Audiences are based only on general characteristics — the new people reached are not identified to us, and your details are not shared with them.

Your contact details are encrypted before they are sent to Meta and are used only for matching. We rely on your consent for this, given when you sign up to hear from us. You can withdraw your consent at any time by unsubscribing from our emails or by emailing us at fish@pysk.co.uk. You can also control how your data is used for advertising through your Facebook and Instagram ad settings, and via Meta's privacy policy.

If you unsubscribe or ask us to delete your details, we will also remove you from any audiences we have shared with Meta.

This excludes text messaging. Where we hold a phone number, it is shared with Meta only on the basis of the advertising consent described here — never because you agreed to receive text messages. Your text-message opt-in data and your consent are not shared with Meta or any other non-affiliated third party, and we do not build advertising audiences from our text-message subscriber list.

We only text you if you asked us to, by ticking a box that said so. We never buy phone numbers, and we never add a number to our texting list because you placed an order.

There are two things we might text you about:

• An event or workshop you registered interest in — for example to ask which dates or price would suit you, or to tell you when booking opens. Only about the event you asked about.
• Our mailing list — occasional news about what has landed, recipes and offers, if you ticked the box to receive these by text.

How to stop. Reply STOP to any marketing text, or email us at fish@pysk.co.uk. Stopping texts does not stop your emails, and stopping emails does not stop your texts — tell us if you want both to end, and we will remove you from everything.

Frequency and cost. Message frequency varies. We do not charge you for messages, but your own network’s standard message and data rates may apply. Our Mobile Terms of Service cover the text message service in full.

Who handles them. Our marketing texts are sent through Klaviyo, who process them on our behalf. Your phone number and your text-message consent are held by us and by Klaviyo, and by nobody else — see the next paragraph.

We do not share your text-message opt-in or consent with anyone. This is worth stating plainly because we do share some hashed contact details with Meta for advertising, described under “Social media advertising” above. The record that you agreed to receive texts, and the consent itself, are excluded from that and from any other sharing with non-affiliated third parties. We never build an advertising audience from our text-message subscriber list.

We use essential cookies to keep your shopping cart and session working. These are strictly necessary and do not require consent.

With your consent (given via our cookie banner), we also use:

• Google Analytics 4 — to understand how visitors use the site and improve the experience.
• Meta (Facebook) Pixel — to measure the effectiveness of our advertising on Meta platforms.
• Klaviyo onsite tracking — to power our website signup forms and track engagement with our marketing emails.

You can change or withdraw your consent at any time via the cookie settings on our site.

Order records are kept for 6 years to meet HMRC requirements. Account information is kept until you ask us to delete it. Session data is temporary and cleared when you close your browser.

Marketing subscriber data, for both email and text, is kept until you unsubscribe, or after 3 years of inactivity (whichever comes first), at which point we remove your record from our active marketing list. We keep a record of your consent, and of your having withdrawn it, for as long as we need it to show we handled your choice correctly.

Details given to register interest in an event or workshop are kept until you ask us to remove them, or for two years after we last heard from you — whichever comes first. We keep them past the first event because the list carries on: it is how we reach people who could not make that date, and how we tell them about the next one. If we decide not to run the event at all, we delete the list.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data (where we have no legal obligation to keep it).
• Object to or restrict how we process your data.
• Receive your data in a portable format.
• Withdraw consent at any time (for consent-based processing).

To exercise any of these rights, email us at the address below. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO).

If you have any questions about this policy or your data, email us at fish@pysk.co.uk or write to us at: