Privacy Policy

This Privacy Policy explains how Rice&Cracker Grading ("RAC", "we", "us" or "our") collects, uses and protects information collected through our website.

We handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact form submissions: your name, selected enquiry category and message content, when voluntarily submitted through the contact form.

Review submissions: your name, star rating and review text, when voluntarily submitted through the review form. Reviews are checked before they appear on the Site, and submitting one indicates you are happy for it to be published alongside the name you provide.

Automatically collected data: basic analytics via Vercel Analytics, such as page views, general device and browser type, and approximate location derived from IP address. This is aggregated and is not used to identify individual visitors.

If and when card submission resumes online, additional information such as shipping address, card details and payment information will be collected. This Policy will be updated before that feature launches.

To respond to enquiries submitted through the contact form.

To publish reviews on the Site, where consent has been given at the point of submission.

To understand aggregate website usage and improve the Site.

To comply with legal obligations where applicable.

This Site does not use advertising or cross-site tracking cookies. Our analytics provider is configured to operate without cookies that require consent under the Privacy and Electronic Communications Regulations.

If we introduce any non-essential cookies in future, we will present a consent banner before they are set.

We do not sell personal information.

Data may be shared with service providers strictly necessary to operate the Site — currently website hosting and analytics via Vercel Inc. — each bound by their own data protection obligations. Additional processors will be listed here if introduced.

Contact form submissions are retained for up to 24 months from the date of the enquiry, after which they are deleted.

Published reviews are retained until you ask us to remove them, or until the Site no longer displays reviews.

We implement reasonable technical and organisational measures to protect personal information, including server-side input validation and sanitisation, rate limiting, and secure credential storage for backend systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Under UK GDPR you have the right to access the personal information we hold about you, to have it corrected or erased, to restrict or object to its processing, and to request a copy in a portable format.

To exercise any of these rights, contact us through our Contact page. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

The Site is not directed at children under 13, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "last updated" date on this page.

Questions about this Privacy Policy can be submitted through our Contact page.