Privacy Policy
At Sugar Devil, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, and protect your data when you use our website, place an order, or interact with us.
Information We Collect
We collect the following types of personal information:
Technical Data: IP address, browser type, time zone, device type, and site usage data via cookies and analytics tools.
Personal Details: Name, email address, phone number, billing and shipping address.
Payment Information: Credit/debit card details or other payment information (processed securely via third-party payment providers).
Order History: Products purchased, dates of orders, transaction amounts.
Account Information (if you register): Login credentials, preferences.
Marketing Preferences: Opt-ins to newsletters or promotional messages.
How We Use Your Information
We use your data to:
Detect and prevent fraud or misuse of our website.
Process and deliver your orders.
Provide customer support and respond to your queries.
Send you order confirmations and delivery updates.
Manage your account (if applicable).
Improve our website, products, and services.
Send marketing emails (only if you’ve opted in — you can unsubscribe anytime).
Legal Basis for Processing
We process your personal data under the following legal bases:
Consent: For email marketing or optional features.
Contractual necessity: To fulfill your order or manage your account.
Legal obligation: For tax, compliance, and accounting purposes.
Legitimate interests: To improve our services and protect our business.
How We Share Your Data
We do not sell your personal data. However, we may share it with trusted third parties, including:
- Payment processors (e.g., Stripe, PayPal).
- Shipping and delivery providers.
- Email marketing services (e.g., Mailchimp).
- Website analytics services (e.g., Google Analytics).
- Legal or regulatory authorities, where required by law.
All third parties are contractually obligated to protect your data and only use it for the purpose we’ve shared it.
Data Retention
We retain your personal data only as long as necessary:
For up to 6 years after your last purchase, unless you request deletion sooner.
To fulfill the purposes described above.
To comply with legal, tax, or accounting obligations.
Your Rights (Under GDPR)
If you’re in the UK or EU, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or outdated information.
- Request deletion of your data (“right to be forgotten”).
- Object to or restrict how we process your data.
- Request data portability.
- Withdraw consent at any time (for marketing, etc.).
To exercise any of these rights, please contact us.
Cookies
Our website uses cookies and similar technologies to enhance your browsing experience. These include:
- Essential cookies – required for site functionality.
- Performance cookies – to analyze site usage.
- Marketing cookies – to deliver targeted ads (only with consent).
You can control cookie settings via your browser or our cookie banner.