Privacy Policy
Last updated: 13 October 2026
This policy explains what personal information we collect when you use our website or buy from us, why we need it, and what your rights are.
Who we are
The Date Bar Ltd (company number [company number]), [registered office address], is responsible for your personal information under UK data protection law. [ICO registration number, if registered.] For any privacy question, email [email protected].
What we collect and why
- Orders: your name, billing and delivery addresses, email address, phone number, what you bought and any notes you add. We need these to make and deliver your order and to keep proper accounts. Our legal basis is performing our contract with you, and our legal duty to keep tax records.
- Accounts: if you choose to create one, your login details and order history. You can also check out as a guest without an account. Legal basis: performing our contract with you.
- Enquiries: what you send us through a form or by email, for example about wedding favours or corporate gifts. We use it to reply and prepare a quote. Legal basis: taking steps at your request before a contract, or our legitimate interest in answering you.
- Technical information: your IP address and browser details, which our website and payment provider use to keep the site secure and prevent fraud. Legal basis: our legitimate interest in running a safe shop.
We don’t send marketing emails at present. If we start a newsletter, we’ll only add you if you ask to join.
Payments
Card payments are handled by Stripe. Your card details go straight to Stripe and are never stored by us. Stripe tells us whether a payment went through and gives us limited details such as the card type and last four digits. Stripe’s own privacy policy explains how it uses your information.
Who we share it with
We only share what each service needs to do its job:
- Royal Mail, to deliver your order: your name, delivery address, and your email address or phone number for delivery updates.
- Stripe, to take payment and check for fraud.
- Our hosting provider, which stores the website and its data on servers in the UK or EU.
- Our email delivery service, which sends order and enquiry emails on our behalf.
- Our accountant and HMRC, where needed for our accounts and tax.
We never sell your information. Some providers, such as Stripe, may process data outside the UK. Where they do, they use legal safeguards approved under UK law, such as standard contract clauses.
How long we keep it
- Order records: six years after the end of the tax year, as UK tax law requires.
- Customer accounts: until you ask us to close yours. Order records inside it are still kept for six years.
- Enquiries that don’t lead to an order: [enquiry retention period, e.g. 12 months], then deleted.
Cookies
We use a small number of cookies that the shop needs to work. They remember what’s in your basket, keep you logged in if you have an account, and let Stripe spot fraudulent payments. Because they are essential, they don’t need your consent.
We don’t use analytics or advertising cookies at the moment. If that changes, we’ll update this policy and ask for your consent first.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the information we hold about you
- have anything incorrect corrected
- ask us to delete your information, unless we must keep it by law
- object to, or ask us to limit, how we use it
- receive your information in a format you can take elsewhere
Email us to use any of these rights. We’ll reply within one month and there is no charge.
If you’re unhappy with how we’ve handled your information, please tell us first so we can try to fix it. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We’ll update this page if anything changes, and the date at the top will show when. See also our Terms and Conditions.
