Privacy Policy
Real Food Markets Ltd  |  Last updated: April 2026
1. Who we are
Real Food Markets Ltd is the data controller responsible for the personal data described in this policy. We operate artisan and street food markets across London and the South of England, including Real Food Markets at Kings Cross and Euston stations, Duke of York Square Food Market (Chelsea), Canopy Market at King’s Cross, and a number of seasonal and event sites.
Company registration: England and Wales.
Contact for data matters: info@realfoodfestival.co.uk

2. Scope of this policy
This policy covers personal data relating to individuals we deal with in a business context. This includes:
•       Market traders and applicants
•       Event partners and sponsors
•       Landlord and estate contacts
•       Suppliers and contractors
•       Press and media contacts
We do not operate consumer-facing data collection. This policy does not apply to website visitors beyond the analytics note in section 5.

3. What data we collect and why
We collect the minimum information needed to manage our business relationships. This typically includes:
•       Name, job title, and business name
•       Business email address and telephone number
•       Correspondence and application information (e.g. trader applications submitted via Google Forms)
•       Financial and invoicing information where relevant (e.g. bank details for trader payments, held in QuickBooks)
•       Records of transactions processed through Square (for turnover-reporting purposes)
We do not collect sensitive personal data (as defined under UK GDPR) in the ordinary course of our operations.

4. Legal basis for processing
Our primary legal basis is legitimate interests (Article 6(1)(f) UK GDPR). We process personal data because it is necessary to manage contracts and ongoing relationships with traders, partners, landlords, suppliers, and press contacts — and because the individuals concerned would reasonably expect this in a professional context.
Where we hold data to fulfil a contract (e.g. a trader licence or supplier agreement), we rely on Article 6(1)(b) as the legal basis for that processing.
We do not rely on consent as our primary basis, and we do not send marketing communications.

5. Third-party tools we use
We use the following tools that may process personal data on our behalf:
•       Google Workspace (Gmail, Google Forms, Google Sheets) — for communication and data collection. Google acts as a data processor under Google’s standard terms.
•       QuickBooks — for financial records and invoicing.
•       Square — for point-of-sale and turnover reporting at market sites.
•       Website analytics — we use standard analytics tools (such as Google Analytics) on our website. These collect anonymised or pseudonymous data about site visits. No personal data is linked to individual identities through this process.
•       CRM — we are developing an internal CRM system to consolidate contact and relationship data. This system holds data equivalent to what we currently manage across Google Workspace and related tools.
All third-party providers are required to handle data in accordance with applicable data protection law.

6. Retention
We keep personal data for as long as the business relationship is active, and for a reasonable period afterwards in case of queries or disputes. Financial records are kept for seven years in line with HMRC requirements. Application data from unsuccessful trader applicants is typically retained for up to two years.
If you would like us to delete your data earlier, please contact us (see section 9).

7. Who we share data with
We do not sell or share personal data for marketing purposes. We may share data in the following limited circumstances:
•       With landlords or site operators where required by the terms of our licence or management agreements (e.g. providing trader lists to a site landlord).
•       With professional advisers (accountants, solicitors) under obligations of confidentiality.
•       Where required by law or a regulatory authority.

8. Your rights
Under UK GDPR, individuals have the right to:
•       Request access to the personal data we hold about them
•       Request correction of inaccurate data
•       Request erasure of data in certain circumstances
•       Object to processing based on legitimate interests
•       Request restriction of processing
•       Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, contact us at the address in section 9. We will respond within one calendar month.

9. Contact us
For any data protection queries, contact:
Real Food Markets Ltd
Email: info@realfoodfestival.co.uk

If you are not satisfied with our response, you have the right to complain to the ICO:
Information Commissioner’s Office
ico.org.uk  |  0303 123 1113

10. Changes to this policy
We will update this policy when our practices change in a material way. The current version is always available on our website. The date at the top of this document indicates when it was last revised.