Privacy Policy & Cookies

Privacy Policy

Snacksy Ltd (“We”) are committed to protecting and respecting your privacy.

This policy (together with our terms of use and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purposes of the Data Protection Act 2018 and the UK GDPR, the data controller is Snacksy Ltd, Unit 1 Kangley Business Centre, Kangley Bridge Road, London, SE26 5AQ, United Kingdom.

Information You Provide to Us

When using the forms on our site, contacting us by email or phone, or placing an order, you typically provide us with the following personal data:

  • Name and billing address

  • Delivery address

  • Email address

  • Email marketing preferences

  • Card summary information (e.g., last 4 digits, card type, expiry date) — provided to us via our payment processor

Information We May Passively Collect

We may automatically collect technical data such as:

  • IP address

  • Browser user agent string (e.g., “Chrome”)

This data is used for anti-fraud and anti-abuse measures, such as blocking spam or malicious activity.

Information We May Share with Third Parties

To fulfil your order and manage communication, we may share information with trusted third parties:

  • Payment Processing: When you pay online, your billing address and limited card information (brand, last 4 digits, expiry) are securely shared with payment processors such as Shopify Payments and PayPal. This is necessary for address verification and anti-fraud checks.

  • Email Marketing: If you subscribe to our email list(s), your name and email address will be shared with our marketing providers, such as Shopify Email and Mailchimp, who assist in sending and tracking emails.

These third parties only use your information to perform the services we have requested and are required to protect your data in accordance with applicable laws.

Information Third Parties May Collect

We use analytics services to understand website usage:

  • Google Analytics: Provides us with aggregate data (e.g., number of page views per hour/day), browser and device types, and general geographic data. While this may involve collecting your IP address and browser details, we do not receive data that identifies you as an individual.

Where and How Your Information Is Stored

All personal data is stored securely through Shopify, which may store data in servers located in the USA, Canada, or other countries offering adequate protection under GDPR. We do not store customer data on local systems outside of Shopify.

All data transmissions (e.g., checkout, login, contact forms) are encrypted using SSL/TLS to protect your data during transit.

Passwords, if applicable, are stored using secure, one-way cryptographic hashing. We do not have access to your plaintext password.

What Do We Use Your Information For?

We use your information to:

  • Fulfil and deliver your orders

  • Send order-related communications (e.g., order confirmation, dispatch notice)

  • Respond to your enquiries

  • Send marketing emails if you’ve opted in

  • Monitor and improve website performance and prevent abuse

Cookies

We use cookies to provide essential site functionality, improve user experience, and track website performance. Cookies may include:

  • Session cookies (to manage your login or cart)

  • Anti-forgery (XSRF) tokens

  • Consent preferences

  • Shopify-specific cookies (e.g., _shopify_y, _landing_page)

  • Analytics cookies (e.g., from Google Analytics)

You can disable cookies in your browser settings, but doing so may prevent the website from functioning properly.

Your Rights

Under UK GDPR, you have rights including:

  • Right to access: You can request a copy of the personal data we hold about you.

  • Right to rectification: You can ask us to correct any incorrect or incomplete data.

  • Right to erasure (“right to be forgotten”): You may request deletion of your personal data, except for data we are legally required to retain (e.g., transaction records).

  • Right to object: You can opt out of marketing communications at any time.

To make a request, please email info@snacksy.co.uk.

Changes to Our Privacy Policy

We may update this privacy policy occasionally. Updates will be posted on this page and are effective immediately upon posting. We recommend reviewing this policy whenever you visit our site.

Contact

Questions, comments, or requests regarding this privacy policy are welcomed and should be addressed to:

info@snacksy.co.uk
Snacksy Ltd, Unit 1 Kangley Business Centre, Kangley Bridge Road, London, SE26 5AQ, United Kingdom