Privacy Policy

Your personal data is very important to us. We will endeavour to take care to protect this information. We would like to highlight below a few matters relating to your information that you should be aware of.

About Us

Our Privacy Notice gives you detailed information on when and why we collect your personal data, how we use it and how we keep it secure. Tara Ventures Limited (trading under the brand name "Gluten Free Glee") is registered in England and Wales with company number 14566850. Our registered office address is at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

In some circumstances, Gluten Free Glee is the data controller of your personal data. This could be your name, contact details, address or any other information that can be linked to you.

If you have any questions regarding this notice, or how we process your personal data, or if you would like to exercise any of your rights under data protection law, please contact us by emailing

Who does this apply to?

This privacy notice is for visitors to our website, clients using our services, and any prospective clients making enquiries via our website and other media. We have split up this notice into sections so that you can easily find the sections which apply to you.


When you contact us

If you get in touch with us you may provide us with personal data. For example, if you join our waiting list, we ask for your email address. We will use the information you provide to keep you up to date with developments and for no other purpose.

When you use our services

By deciding to use our services (as described in the “Our service” section of the Terms and Conditions), you are choosing to provide us with personal data about yourself. We will use this for the purposes described in the “Our service”.


When you agree to receive marketing material from us or third parties, we collect your name, email address and preferences, so that we may provide you with the relevant marketing materials.


The information we hold on you will be used in a number of ways. Under the UK Data Protection Act, we can only use your personal data if we have a legal basis for doing so.

The legal basis upon which we rely to process your personal data will be one of the following:

  • Performance of a contract with you
  • For our legitimate interests (which may include those of a third party)
  • Compliance with a legal obligation
  • Consent

Where we have indicated that we use consent as the legal basis to process your personal data, you have the right to withdraw consent at any time. We shall then delete your personal data unless it is linked to another process where we have a lawful basis to process it.

The list below sets out more specifically how we use your personal data, the purpose of the processing and the legal basis upon which we rely for the processing.

Provision of services

If you are a new customer we will collect information about you including contact details, financial information and information about your household and relationships where relevant for the management of your finances.

In providing services for you and in managing our relationship with you we will process contact details, financial information and records of our interactions with you.

Legal Basis – Performance of Contract

Responding to queries

When you contact us with queries relating to our products or services we offer, either as a client or prospective client, including our website ‘Contact Us’ page, we will process the query, your contact details and associated notes.

Legal Basis – Legitimate Interest – It is in our interest to administer the arrangements that we have with you under our Terms and Conditions and to provide customer service and support functions including those made available on our website and over the telephone

Marketing of our own products

If we wish to communicate with you about our own products/services, we shall give you the opportunity to opt out of these types of communications from us.

Legal Basis – Legitimate Interest – It is in our interest to market our products and services to you

Marketing for our business partners

We would like to tell you about the products and services of the business partners we work with by means of marketing communication (by telephone, email or post). When you become a client of ours, you will have the option to consent, or opt in to receiving such communications.

In addition, we would like to share your name and contact details (in particular your telephone number, email and/or postal address) with our business partners so that they can contact you directly to tell you about their products and services. These types of communications will also only be made with your prior consent.

Legal Basis – Consent


We sometimes anonymise and/or aggregate personal data, for example, for statistical analysis and administration including analysis of trends, to carry out actuarial work, to tailor our business and our service offerings, to conduct risk assessment and to analyse costs and charges. We do this in such a way as to ensure that you are not identified or identifiable from it, in order to use it for the above purposes.

Legal Basis – Legitimate Interest – It is in our interest to conduct market research and analysis including developing statistics.

Updating you about changes at our organisation

We may email you about any changes to this policy and others via email.

Legal Basis – Legitimate Interest – It is in our interest to keep our clients informed of any changes to our policies.

Responding to data protection rights

When we are processing your request for information or when you exercise your rights against us under data protection law.

Legal Basis – Legal Obligation


We will never share, sell, rent or trade your personal data to any third parties for marketing purposes without your prior consent. We will ask for your consent to share personal data with our marketing partners.


We only use established suppliers and vendors who meet the highest standards of information security and privacy standards. We vet suppliers which store and transfer your data and are sure your information is adequately protected. We use a variety of technical and organisational methods, including suitable access controls and encryption of your data in transit and at rest, to keep your data safe. When we work with third parties we use contractual measures to establish the appropriate and secure handling of your personal data.


We will keep your personal data only for as long as we need it to fulfil the purposes for which it was collected and to comply with legal and/or regulatory requirements. The criteria we use to determine data retention periods for personal data include the following:

Retention in case of queries. We will retain your personal data in case of queries from you about our provision of services to you until your query has been dealt with, and a short period after that, in order to ensure that any follow up questions can be appropriately handled.

Retention in case of claims. We will retain some personal data for the period in which you might bring claims against us in connection with our Terms and Conditions, including any legal claims or court cases.

Retention in accordance with legal and regulatory requirements. We will retain your personal data after the periods described above only as necessary to comply with our regulatory compliance obligations, or statutory requirements for data retention.


  • You have various rights under data protection law, which we have described below. Please note that they may not always be applicable, depending on the circumstances. If you wish to exercise any of these rights please contact us You will not be required to pay any fee for exercising your rights.
  • You have the right to obtain copies of, or access to, your personal and financial information which we hold as data controller, subject to certain exemptions and restrictions.
  • You have the right to seek the rectification of inaccurate personal data without undue delay and to have incomplete personal data completed in certain circumstances.
  • You have the right to have personal data erased without undue delay in certain circumstances (also known as the “right to be forgotten”). This right is not absolute – it applies only in particular circumstances and where it does not apply any request for erasure will be rejected.
  • You have the right to withdraw your consent for any processing which was based on consent at any time. This will not invalidate any of the processing that has previously taken place.
  • You have the right to object to processing of your personal data – this right allows individuals in certain circumstances to object to processing based on legitimate interests, including profiling based on legitimate interests; direct marketing; and processing for purposes of statistics.
  • You have the right to restrict the processing of your personal data


This policy was last updated on 23rd January 2023. We may review and update it periodically as any of our processing changes. If we have your contact details, we may email you about any updates to this policy. Please check this page in future for any updates.