Last updated: May 2026
1. Introduction
This privacy policy explains how The Devon Fudge Company (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website, place an order, contact us, or interact with us online.
We are committed to protecting your privacy and handling your personal data transparently and in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (“PECR”).
2. Who We Are
Data Controller: The Devon Fudge Company
Email: thedevonfudgecompany@gmail.com
Postal Address: Unit 19 Match Mill Business Park, Newnham Road, Plympton, Plymouth, Devon, PL7 4AW
If you have any questions about this privacy policy or how we handle your data, please contact us using the details above.
3. Personal Data We Collect
We may collect and process the following categories of personal data:
Information you provide directly:
Payments are processed securely by third-party payment providers. We do not store full payment card details on our servers.
Technical and usage information:
When you visit our website, we may automatically collect:
4. How We Use Your Data
We use your personal data for the following purposes:
|
Purpose |
Lawful Basis |
|
Processing and delivering orders |
Performance of a contract |
|
Responding to enquiries |
Legitimate interests |
|
Managing customer accounts |
Performance of a contract |
|
Fraud prevention and website security |
Legitimate interests |
|
Legal and accounting obligations |
Legal obligation |
|
Sending marketing emails |
Consent or soft opt-in |
|
Website analytics and improvements |
Consent and/or legitimate interests |
5. Marketing Communications
If you subscribe to our mailing list or purchase from us, we may send you marketing communications about our products and offers where permitted by law.
You can unsubscribe from marketing emails at any time by:
We do not sell your personal data to third parties.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your browsing experience and analyse website traffic.
Some cookies are essential for the operation of the website. Others, including analytics and advertising cookies, are only used with your consent.
You can manage your cookie preferences through our cookie banner or browser settings.
For more information, please see our Cookie Policy.
7. Sharing Your Data
We may share your personal data with trusted third-party service providers, including:
These providers only process your data on our behalf and under appropriate contractual safeguards.
We may also disclose personal data where required by law or to protect our legal rights.
8. International Transfers
Some of our service providers may process personal data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place, such as:
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, including legal, accounting and tax requirements.
Typical retention periods may include:
10. Your Rights
Under UK data protection law, you have the right to:
To exercise any of these rights, please contact us using the details above.
11. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
12. Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse or disclosure.
Payment transactions are encrypted using secure SSL technology.
13. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites.
14. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
