Privacy Policy

Gleaned — formally Gleaned Organics ("we", "us") — monitors the online shops of UK certified organic farms and vineyards and tells account holders about genuine offers. This policy explains what personal data we hold about you and why.

What we collect

• Account details — your name (if you give one) and email address.
• Password — stored only as a salted cryptographic hash. We never store or see your actual password.
• Google sign-in — if you use "Continue with Google", Google shares your name and email address with us. We do not receive your Google password and cannot access anything else in your Google account.
• Marketing preference — whether you opted in to marketing email, and when.
• Preferences you choose to give us — household size, food categories you'd rather not see, and (entirely optionally) your age range and gender. These exist only to tailor which offers we show you and to size basket suggestions; every one of them can be left blank or changed later from the Preferences page.

What we use it for

• Running your account — signing you in, and sending service emails such as email verification and the offer digests the service exists to provide.
• Marketing email — only if you ticked the optional box when signing up (or opt in later). Every marketing email includes a way to opt out, or just reply and ask.

We do not sell your data, and we never share it with anyone for their own advertising.

Cookies & analytics

Essential cookies — we set one (oom_session) to keep you signed in for up to 30 days, and short-lived helpers during sign-up. These are always on because the service can't work without them.

Analytics — only with your consent. If you accept on the cookie banner, we use Google Analytics 4 (via Google Tag Manager) to understand how the site is used — pages visited, roughly where visitors come from, which features get used — so we can improve it. This sets Google cookies and shares usage data with Google as our analytics processor. Nothing analytics-related loads until you accept, and you can decline with no loss of function. To change your mind later, clear this site's cookies in your browser and the banner reappears.

Where your data lives

The service runs on Netlify (hosting and data storage), emails are sent via Google's Gmail service and Resend, and — with your consent — analytics is provided by Google (Analytics 4 / Tag Manager). These act as our processors and may process data outside the UK under their standard safeguards.

How long we keep it

Your account data is kept while your account exists. Unverified accounts may be deleted after their verification link expires. Ask us to delete your account and we will remove your data.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it or delete it, and withdraw marketing consent at any time. To do any of these, contact us at the email address any of our emails come from. If you're unhappy with how we handle your data, you can complain to the ICO.