SUGAR DEVIL / YOUR INFORMATION

Privacy,
clearly explained.

When you shop with Sugar Devil, we use certain information to process your order, support you and keep our website working. This page explains what we collect, why we use it and the choices you have, including your choices about marketing emails.

Last updated:

01 / ORDERSWe use the details needed to deliver your purchase.
02 / PAYMENTSCard and PayPal payments use specialist providers.
03 / YOUR CHOICESChoose whether to receive offers and manage optional tracking.

01 / ABOUT THIS POLICY

Who we are.

Sugar Devil LTD is responsible for the personal information described in this policy when it decides how and why that information is used. This is sometimes called being the data controller.

BUSINESS ADDRESS
60 Gower Street, Kingston Court
Glasgow, Scotland, UK
G41 5QD

This policy covers personal data collected through sugardevil.co.uk, its WooCommerce shop and your communications with us.

02 / THE INFORMATION

What we collect.

Shopping and account details

Your name, email address, billing and delivery addresses, order details and any phone number you choose or need to provide. If you make an account, we also handle account and login information.

Payment information

Payment method, payment status, transaction identifiers, amounts and information needed to reconcile orders or handle refunds. Your payment provider handles the payment credentials used to authorise the transaction.

Messages you send us

Information submitted through our Contact Us form or by email, including your name, email, enquiry, optional order number and anything you choose to put in your message.

Email marketing preferences

If you choose to receive promotional emails, we may record your email address, subscription status, when and how you subscribed, and any changes to your preferences. We also maintain a limited record when you unsubscribe so we can respect your choice.

Website and device information

Technical records such as IP address, browser and device information, security logs, cookie choices and—where permitted by your choices—information about pages viewed and actions on the site.

We generally obtain this information from you, your use of the website, or from providers involved in your payment or order. Please avoid including full payment-card details or unnecessary sensitive information in contact messages.

03 / WHY WE USE IT

What we use it for.

UK data-protection law requires us to identify a lawful basis for using personal information. Different uses have different bases:

Process, deliver and manage ordersContract

To take your order, send confirmations, arrange delivery, manage your basket or account, and deal with cancellations and refunds.

Answer enquiries and provide supportContract or legitimate interests

To respond to your questions, resolve problems, and maintain a record of conversations when reasonably needed to support customers.

Keep required business recordsLegal obligation

To maintain records required for tax, accounting, consumer protection and other applicable legal duties.

Protect the website and prevent misuseLegitimate interests or legal obligation

To detect spam, investigate suspected fraud or abuse, and maintain reliable website and payment operations.

Send marketing emails when permittedConsent or legitimate interests where a valid soft opt-in applies

To send product news, offers and other promotional messages only when we have permission under the applicable electronic marketing rules. You can stop these emails at any time.

Measure visits and advertising performanceConsent where required

To understand website use and the effectiveness of campaigns through optional analytics and advertising technologies. These are subject to your applicable cookie and tracking choices.

Our relevant legitimate interests include running a reliable store, assisting customers, reducing fraud and keeping services secure. We consider those interests against visitors’ rights and freedoms.

Some information—such as a delivery address—is necessary to fulfil your order. If you do not provide required checkout details, we may be unable to complete the purchase.

04 / EMAIL COMMUNICATIONS

Emails from us.

Order and service updates

When you place an order or contact us, we use your email address for necessary communications such as order confirmations, payment and refund information, dispatch and delivery updates, and replies to your enquiries. These are part of providing the service you requested and do not depend on agreeing to promotional emails.

News, offers and product updates

We also plan to send optional promotional emails about Sugar Devil products, new arrivals, offers and newsletters. We will do this when you have given us valid marketing permission, or where the limited existing-customer soft opt-in is lawfully available. That exception can apply only when we collected your details in connection with a sale or negotiation of a sale, the messages concern our own similar products, and we offered an easy opt-out when collecting your details and in every marketing message.

Marketing emails are separate from essential order updates. We will not make consent to marketing a requirement for completing a purchase, and we will not treat an order as automatic permission for promotional messages.

Your email preferences

Every promotional email will provide a way to unsubscribe. You can also request removal from our marketing list at info@sugardevil.co.uk. We will stop sending marketing emails when you opt out and may keep the minimum information necessary to ensure you are not contacted again for marketing. Unsubscribing does not stop emails needed to manage an order, provide support or comply with legal obligations.

Marketing emails and tracking are different choices.

Choosing to receive email offers does not, by itself, give permission for non-essential analytics or advertising cookies. Those choices are handled separately through our cookie controls.

05 / AT CHECKOUT

Paying securely.

Our available payment options include Stripe for card payments and PayPal. When you choose one, information needed to process or verify the payment is handled using that provider’s payment technology and privacy practices. We receive information such as whether the payment succeeded and the related transaction details to manage your order.

Payment providers may also process information to prevent fraud, meet financial regulations and operate their services. Read their privacy information for details: Stripe and PayPal.

Never send a full card number, security code or account password through the Contact Us form or by email.

06 / SITE MEASUREMENT

Analytics & advertising.

We plan to use Google Analytics to understand site activity, Google Ads to measure advertising and Meta Pixel to understand and measure advertising interactions. Depending on your choices and the features enabled, these tools may collect identifiers, device and browsing information, page visits, and shopping events.

Where consent is required, optional analytics and advertising technologies will be used only in line with the choices you make through our cookie-consent controls. You can decline optional tracking and still use the essential shopping functions of the site.

We also use Google Search Console to understand how the site appears in Google Search. Search Console is a search-performance service, not the same as placing an advertising pixel on your device.

Cookies and your preferences

Essential technologies help keep the basket and checkout working. Other technologies may support analytics and advertising. Our separate Cookie Policy will describe the cookies and similar technologies in more detail. Cookie preference controls will be provided as part of the site’s consent setup.

07 / THE SERVICES INVOLVED

Who we share it with.

We share only information relevant to the services involved in operating the store. Recipients can include:

  • Stripe and PayPal — to process payments and related fraud and financial checks.
  • Delivery and fulfilment providers — to dispatch and deliver orders, and make tracking available.
  • WordPress/WooCommerce hosting and technical providers — to host, maintain and protect the shop.
  • Email and customer-support services — to send order and customer-service messages, and to deliver promotional emails where permitted. The marketing email platform has not yet been selected.
  • Google and Meta services — for the analytics and advertising functions described above, where enabled and permitted.
  • Professional advisers or authorities — where reasonably required for business advice, legal claims or compliance with law.

Our current custom contact form sends enquiries to our support email inbox. The form handler itself does not create a separate WordPress database of submitted messages.

08 / LOCATION OF DATA

International transfers.

Some providers may process or access information outside the UK, including through international business operations. Where UK data-protection rules apply to a restricted transfer, an appropriate lawful transfer mechanism is required. This may include UK adequacy regulations or approved contractual safeguards, depending on the provider and destination.

You can contact us to request information about the safeguards relevant to your data. We review these arrangements as part of our provider setup.

09 / KEEPING INFORMATION

How long we keep it.

We keep personal information only for as long as needed for its purpose. The period depends on the type of record, whether an order or enquiry is open, legal accounting or tax requirements, the need to resolve disputes and any applicable provider settings.

For example, order and payment records may need to be retained longer than a routine customer enquiry. Marketing subscription records are kept as needed to manage permissions, and we may retain a limited suppression record after an unsubscribe to ensure we honour that request. When information is no longer needed, we delete, anonymise or securely dispose of it in line with the applicable retention process. You can ask us about the criteria or retention period for a particular record.

10 / YOUR CONTROL

Your privacy rights.

Depending on the circumstances, UK data-protection law gives you the right to:

  • Access your personal data and request a copy.
  • Correct inaccurate or incomplete personal data.
  • Request deletion when the relevant conditions apply.
  • Restrict how certain personal data is used.
  • Object to processing based on legitimate interests, including an absolute right to object to direct marketing.
  • Receive or transfer certain information where data portability applies.
  • Withdraw consent at any time where we rely on consent, without affecting earlier lawful processing.
  • Stop marketing emails at any time using the unsubscribe option in promotional emails or by contacting us.

To exercise a right, email info@sugardevil.co.uk. We may ask for proportionate information to verify the request. We will respond within the time required by law.

11 / QUESTIONS

Talk to us.

We take reasonable steps to protect personal information through appropriate technical and organisational measures. No online service can promise absolute security, and we will review this policy when our services or data practices change.

For a question or request about your information, email info@sugardevil.co.uk or use our Contact Us page.

If you are unhappy with our response, you can complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator.

SUGAR DEVIL / CUSTOMER CAREQuestions about your data?

We’re happy to help you understand your options.

Get in touch