PRIVACY POLICY

Aunty Lane’s Rocky Road (“we”, “us”, “our”) is committed to protecting your privacy and your personal data. This policy explains how we collect, use, store and protect your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Business name: Aunty Lane’s Rocky Road

Owner: Lara Foulkes - Brown

Location: West Midlands, United Kingdom

Email: hello@auntylanesrockyroad.co.uk

For data protection purposes, we are the data controller of your personal information.

2. What Personal Data We Collect

We may collect and process the following information:

Full name

Email address

Telephone number

Billing and delivery address

Order details and preferences

Payment confirmation (we do not store card details)

IP address and website usage data (via cookies and analytics tools)

3. How We Collect Your Data

We collect data when you:

Place an order on our website

Subscribe to updates or promotions

Browse our website (via cookies and tracking tools)

4. Why We Use Your Data (Lawful Basis)

Under UK GDPR, we process your data because:

Purpose Lawful Basis

To fulfil your order Contract

To respond to enquiries Legitimate interest

For legal/tax records Legal obligation

For marketing (if opted in) Consent

Website analytics Legitimate interest

5. How We Store and Protect Your Data

Your data is stored securely using password-protected systems and trusted third-party platforms.

We keep personal data only as long as legally required or necessary for business purposes.

6. Who We Share Your Data With

We only share your data with trusted third parties where necessary, such as:

Website and order platforms

Payment processors

Courier and delivery companies

Accounting software

All third parties are required to handle your data securely and lawfully.

7. Your Data Protection Rights

You have the right to:

Access your personal data

Request correction

Request deletion

Restrict processing

Object to processing

Withdraw consent at any time

To exercise these rights, email:

hello@auntylanesrockyroad.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

8. Cookies

We use cookies to improve your browsing experience and understand website usage. You can manage or disable cookies in your browser settings at any time.

9. How Long We Keep Your Data

Order records: kept for 6 years (legal requirement)

Enquiry data: up to 12 months

Marketing data: until you unsubscribe

10. International Transfers

We do not intentionally transfer personal data outside the UK. If any third-party services store data overseas, they are required to meet UK GDPR standards.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.