Privacy Policy (UK GDPR)

Last updated: 17 September 2026

1. Who We Are

Cocoa Caffrey operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience. Cocoa Caffrey is powered by SquareSpace, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.

2. The Information We Collect

Depending on how you interact with us, we may collect:

  • Contact Details: Name, billing and delivery address, telephone number and email address.

  • Payment Information: Payment details, billing information and transaction confirmations. Payment card information is processed securely by our payment providers.

  • Account Information: Username, password, preferences and account settings (where applicable).

  • Transaction Information: Products viewed, purchased, returned or exchanged, order history and shopping preferences.

  • Catering Information: Event date, venue, guest numbers, menu choices, delivery details, and dietary requirements or allergy information supplied by you.

  • Communications: Information contained in emails, contact forms, telephone calls and customer service enquiries.

  • Technical Information: IP address, browser type, device identifiers and website usage data collected through cookies and similar technologies.

3. How We Use Your Data

We use your personal data to:

  • Process and deliver online orders

  • Arrange and provide bespoke catering services

  • Communicate about your orders or bookings

  • Manage payments and refunds

  • Respond to enquiries

  • Improve our website and customer experience

  • Send marketing emails (only where you have consented or where permitted under UK law)

  • Comply with legal and accounting obligations

4. Legal Obligations

We may process your information where necessary to comply with UK laws, including tax, accounting and consumer protection legislation.

5. Payments

We do not store your full payment card details. Payments are processed securely by our third-party payment provider, SquareSpace, who process your information in accordance with their own privacy policies.

6. Sharing Your Information

We only share personal data where necessary with trusted service providers, including:

  • Payment processors

  • Delivery and courier companies

  • Website hosting providers

  • Booking or ecommerce platforms

  • Professional accountants and legal advisers

  • IT and email service providers

We never sell your personal information.

7. Cookies

Our website uses cookies to:

  • Enable essential website functionality

  • Remember your preferences

  • Analyse website traffic

  • Improve performance

Non-essential cookies will only be used with your consent through our cookie banner. You can change your preferences at any time.

8. How Long We Keep Your Data

We retain personal information only for as long as necessary:

  • Order records: up to 6 years for tax and accounting purposes

  • Catering enquiries: up to 2 years after the event unless a booking is made

  • Marketing consent: until you unsubscribe or withdraw consent

  • Website analytics: according to our analytics provider's retention settings

9. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate information

  • Request deletion of your data

  • Restrict or object to processing

  • Request transfer of your data

  • Withdraw consent at any time

  • Complain to the Information Commissioner's Office (ICO)

You can exercise these rights by emailing cocoacaffrey@gmail.com

10. Data Security

We use appropriate technical and organisational security measures to protect your personal data, including secure website encryption (SSL), restricted access to customer information, and trusted third-party service providers.

11. Children's Privacy

Our website and services are not intended for children under 13, and we do not knowingly collect their personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website with the revised effective date.

13. Contact

Cocoa Caffrey

Email: cocoacaffrey@gmail.com