Privacy policy

Last updated: 1 May 2026.

This policy explains what personal information we collect when you use this website (nicespicegroup.com) or contact us, what we do with it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

This website is operated by Nice Spice Limited, a private limited company registered in England and Wales under company number 17160997. Our registered office is 30 Market Parade, Havant, Hampshire, PO9 1QF, United Kingdom. We are the data controller for personal data processed through this website.

You can contact us about privacy matters via the contact form (subject: "Privacy enquiry") or by writing to the postal address above.

2. What information we collect

We only collect information that you actively give us, plus a small amount of technical information that any web server needs to deliver pages.

Information you give us via the contact form

• Your name
• Your email address
• The subject category you select
• The content of your message
• Confirmation that you have read this policy and consent to a reply

Information our web server logs automatically

• Your IP address
• The page you requested and the time of the request
• The HTTP referrer (the page you came from), if your browser sent it
• Your browser's user-agent string

These server logs are kept for up to 30 days and are used only for security, troubleshooting and to detect abuse of the site.

3. Lawful bases for processing

Purpose	Lawful basis (UK GDPR)
Replying to your contact-form message	Consent (Art. 6(1)(a)) — given by ticking the consent box on the form.
Operating and securing the website (server logs)	Legitimate interests (Art. 6(1)(f)) — keeping the site available and free from abuse.
Storing the cookie-consent preference cookie	Strictly necessary (PECR) — no consent required.

4. How long we keep your information

• Contact form messages: up to 12 months from the date of your last reply, then deleted.
• Web server access logs: up to 30 days, then automatically rotated and deleted.
• Cookie consent preference: stored locally in your browser for up to 12 months.

5. Who we share your information with

We do not sell, rent or trade your personal information. We share it only with:

• Our hosting provider (Hostinger International Ltd.), who processes web server logs and email on our behalf as a data processor under a written contract.
• Authorities, courts or regulators, where we are legally required to do so (for example, in response to a valid court order or to comply with food safety or tax law).

We do not use third-party advertising networks, third-party analytics, or social-media tracking pixels on this website.

6. International transfers

Our hosting infrastructure is located within the European Economic Area. Where any processor we use transfers data outside the UK or EEA, we rely on adequacy decisions or the UK International Data Transfer Agreement / EU Standard Contractual Clauses with appropriate safeguards.

7. Cookies

We use only strictly necessary cookies and a single preference value to remember your cookie-banner choice. We do not use advertising or analytics cookies. See our cookie policy for details.

8. Your rights

Under UK GDPR you have the following rights:

• The right to be informed (this notice)
• The right of access to your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing based on legitimate interests
• The right to withdraw consent at any time, where processing is based on consent
• Rights related to automated decision-making (we do not carry out automated decision-making)

To exercise any of these rights, please contact us using the details in section 1. We will respond within one calendar month.

9. Complaints

If you are unhappy with how we have handled your personal data, you can complain to the UK Information Commissioner's Office (ICO). Their website is ico.org.uk, helpline 0303 123 1113. We would, however, appreciate the chance to put things right first — please contact us.

10. Children

This website is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will reflect any change. Material changes will also be highlighted on the home page.