Privacy
Privacy Policy
What we collect, why we use it, and your rights.
Last updated: May 2026
1.Who We Are
Sweets n Stuff Bouquets Ltd ("we", "us", "our") operates the Sweets n Stuff app and website. We are the data controller for the personal information we collect from you.
Contact: sweets@sweets-n-stuff.com
2.What Data We Collect
- Account data: Name, email address, and password (hashed) when you register.
- Order data: Delivery address, order contents, payment references (we do not store card numbers — these are handled by Stripe).
- Personalisation data: Custom text, uploaded images, and AI-generated designs you create.
- Usage data: Pages visited, actions taken, device type, and IP address via analytics.
- Communications: Emails you send us and your marketing preferences.
- Loyalty & membership data: Points balance, rewards history, referral codes, event reminders.
3.How We Use Your Data
- To process and fulfil your orders.
- To send order confirmations, shipping updates, and tracking information.
- To manage your account, membership, and loyalty rewards.
- To send event reminders you have set up in your calendar.
- To send marketing emails (only with your consent, and you can unsubscribe at any time).
- To improve our products and services through analytics.
- To comply with legal obligations.
4.Legal Basis for Processing
- Contract: Processing your orders and managing your account.
- Legitimate interests: Fraud prevention, security, and improving our service.
- Consent: Marketing communications and cookies.
- Legal obligation: Tax records and regulatory compliance.
6.Data Retention
We retain your personal data for as long as your account is active, or as needed to provide services. Order data is retained for 7 years for tax/legal purposes. You may request deletion of your account and associated data at any time (subject to legal retention obligations).
7.Your Rights (UK GDPR)
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict processing.
- Data portability (receive your data in a machine-readable format).
- Withdraw consent at any time (for marketing).
- Lodge a complaint with the ICO (Information Commissioner's Office): ico.org.uk
To exercise any right, contact: sweets@sweets-n-stuff.com
9.Children's Privacy
Our service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.
10.International Transfers
Your data may be processed outside the UK/EEA by our service providers (e.g. Stripe, Base44). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
11.Security
We implement industry-standard security measures including TLS/SSL encryption, hashed passwords, and secure payment processing through Stripe. However, no method of transmission over the internet is 100% secure.
12.Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or prominent notice in the app. Continued use of our service after changes constitutes acceptance of the revised policy.
Questions about this page?
Email us at sweets@sweets-n-stuff.com
