1. Data We Collect

We collect personal information necessary to fulfill your orders and provide our services, including:

• Identity Data: Name, title, and date of birth (for age-restricted items or classes).

• Contact Data: Billing address, delivery address, email address, and telephone numbers.

• Financial Data: Payment card details (processed securely via our third-party payment provider; we do not store full card numbers).

• Technical Data: IP address, login data, browser type, and location (via Cookies).
   

2. How We Use Your Data

We only use your personal data when the law allows us to. Most commonly:

• Performance of Contract: To process and deliver your chocolate orders or manage your class bookings.

• Legitimate Interest: To improve our website and services.

• Consent: To send you marketing emails and newsletters (which you can opt out of at any time).

• Legal Obligation: To comply with tax or health and safety regulations.
   

3. Data Sharing

We do not sell your data. We only share it with trusted third parties to run our business, such as:

• Delivery Couriers: To get your chocolates to your door.

• Payment Processors: To securely handle transactions (e.g., Stripe, PayPal).

• Email Service Providers: To send you order confirmations and marketing (if opted-in).
   

4. Data Retention

We keep your data only as long as necessary.

• Order Records: Typically kept for 6 years to comply with UK Tax (HMRC) requirements.

• Marketing Data: Kept until you unsubscribe or ask us to delete it.
   

5. Your Legal Rights

Under UK GDPR, you have the following rights regarding your data:

• Access: The right to request a copy of the data we hold about you.

• Correction: The right to fix inaccurate info.

• Erasure: The right to ask us to delete your data (the "Right to be Forgotten").

• Withdraw Consent: The right to stop receiving marketing at any time.
   

6. Cookies

Our site uses cookies to remember your shopping basket and analyze site traffic. You can manage your cookie preferences through your browser settings.

​

7. Contact & Complaints 

If you have any questions about this Privacy Policy or our data protection practices, please contact us at:

• Email: richie@heppells.co.uk]

• Address: Heppells Chocolatier Patissier Limited, Unit 3, 352 Pelham Road, Immingham, DN40 1PX.

Your Right to Complain: You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.