Privacy Policy
Last updated: 26 October 2026
Introduction
This Privacy Policy explains how The Cacao Company ("we", "us", "our") collects, uses and protects your personal information when you visit www.cacaocompany.co.uk, create an account or buy from us. We are the data controller for your personal data and we are committed to handling it securely and in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.
Information we collect
Personal information: your name, billing and delivery address, email address and phone number.
Order information: the products you buy, your order history and payment details. Card payments are processed securely by our payment providers; we do not see or store your full card number.
Account information: if you create an account, your login details and saved addresses.
Messages: anything you send us through our contact form, chat or email.
Technical data: your IP address, browser and device type, and how you use our website.
Marketing preferences: whether you have chosen to hear from us by email.
How we use your information
To process, dispatch and deliver your orders (necessary to perform our contract with you)
To contact you about your order, account or enquiry, and provide customer support
To send your welcome discount code and marketing emails, only if you have opted in (based on your consent)
To improve our website, products and service (our legitimate interests)
To prevent fraud and keep our website secure (our legitimate interests)
To meet our legal, tax and accounting obligations
Sharing your information
We only share your personal data where needed to run our business, with trusted providers such as:
Our website and online store platform (Squarespace)
Payment processors (such as Stripe and PayPal)
Delivery companies (such as Royal Mail)
Email providers we use to contact you
We may also share information where required by law. We never sell or rent your personal information to anyone.
International transfers
Some of our providers may store or process data outside the UK. Where this happens, we rely on those providers having appropriate safeguards in place, such as UK-approved contract terms, to protect your data.
Data storage and security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration.
How long we keep your data
We keep your personal data only for as long as we need it for the purposes above. Order and payment records are kept for up to 6 years to meet our tax and accounting obligations. You can ask us to delete your account at any time.
Your rights
Under UK data protection law, you have the right to:
Access the personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data
Object to or restrict how we use your data
Ask for your data in a portable format
Withdraw your consent to marketing at any time, using the unsubscribe link in any email or by contacting us
To use any of these rights, email cacao@mail.co.uk. If you are unhappy with how we have handled your data, you can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
Our website uses cookies to make it work properly (for example, to remember your basket), to understand how visitors use the site and to improve your experience. You can control or turn off non-essential cookies through your browser settings.
Children
Our website and products are intended for adults. We do not knowingly collect personal data from anyone under 18.
Third-party links
Our website may link to other websites, such as our social media pages. We are not responsible for the privacy practices of these sites.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.
Contact us
If you have any questions about this Privacy Policy or how we handle your data, please email cacao@mail.co.uk or write to The Cacao Company, 3 Efik House, Walton Road, Liverpool, L4 4AF.