Privacy and Cookie Policy

Crafty Cook by Kandy Kitchen Creations
Last Updated: 11 September 2025

This Privacy and Cookie Policy explains how Kandy Kitchen Creations LTD (“we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit our website kandykitchencreations.co.uk or interact with our services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and other applicable laws.

1. Who We Are

Kandy Kitchen Creations LTD
Unit 3C Moss Mill Industrial Estate
Woodbine Street East
Rochdale OL16 5LB
United Kingdom

Contact Details:
Tel: 01706 334308
Email: [email protected]
Registered Number: 11930098
VAT Registration: 422397890

If you have any questions about this policy or how we handle your personal information, please contact us using the details above.

2. Information We Collect

We collect personal information about you in the following ways:

a) Information You Provide

When you make a purchase or create an account: Name, email address, billing and shipping address, phone number, and payment details.
When you contact us: Information provided through emails, forms, or phone calls to our customer service team.
When you sign up for newsletters or promotions: Email address and marketing preferences.

b) Information We Collect Automatically

Website usage data: IP address, browser type, device information, pages visited, and time spent on our website, collected via cookies and similar technologies.
Transaction data: Details of your purchases, including order history and payment methods (excluding full payment card details, which are processed securely by our payment providers).

c) Information from Third Parties

We may receive information from third-party services, such as WooCommerce, Divi, or payment processors, to facilitate orders and website functionality.
Analytics providers (e.g., Google Analytics) may provide aggregated data about website usage.

3. How We Use Your Information

We use your personal information for the following purposes:

To process and fulfill orders: Including payment processing, shipping, and customer support.
To improve our services: Analyzing website usage to enhance user experience and optimize our website.
To communicate with you: Sending order confirmations, responding to inquiries, and providing customer support.
For marketing purposes: Sending newsletters, promotions, or updates (only with your consent, where required).
To comply with legal obligations: Such as tax reporting, fraud prevention, and compliance with UK GDPR and Data Protection Act 2018.

Our legal basis for processing your data includes:

Contract: To fulfill your orders or provide services.
Consent: For marketing communications or certain cookies.
Legitimate Interests: To improve our website and services or prevent fraud.
Legal Obligation: To comply with applicable laws.

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

Essential Cookies: Necessary for the website to function, such as enabling WooCommerce shopping cart functionality.
Performance Cookies: Collect anonymous data about how you use our website (e.g. Google Analytics).
Functional Cookies: Remember your preferences, such as language or login details.
Marketing Cookies: Used to deliver relevant advertisements or track marketing campaigns.

Managing Cookies

You can control cookies through your browser settings or by clicking the cookie consent banner on our website. Note that disabling essential cookies may affect website functionality.

For more information about the specific cookies we use, please contact us at [email protected].

5. Sharing Your Information

We may share your personal information with:

Service Providers: Third parties that provide services such as payment processing (e.g., Stripe, PayPal), shipping, or website hosting (e.g. WordPress, Divi, WooCommerce).
Analytics Providers: To analyse website performance (e.g. Google Analytics).
Legal Authorities: When required by law or to protect our rights, such as in response to a court order or fraud investigation.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to a third party.

We ensure that all third parties comply with data protection laws and process your information securely.

6. International Data Transfers

As a UK-based company, most of our data processing occurs within the UK. However, some third-party providers (e.g., WooCommerce or Google Analytics) may process data outside the UK. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions, in compliance with UK GDPR.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. For example:

Order information is retained for 7 years to comply with UK tax and accounting laws.
Marketing preferences are retained until you unsubscribe or withdraw consent.
Website usage data is typically retained for up to 26 months (e.g. Google Analytics).

When your data is no longer needed, it is securely deleted or anonymized.

8. Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you.
Rectification: Ask us to correct inaccurate or incomplete data.
Erasure: Request deletion of your data (subject to legal obligations).
Restriction: Request that we limit the processing of your data.
Portability: Request a copy of your data in a structured, machine-readable format.
Object: Object to processing based on legitimate interests or for marketing purposes.
Withdraw Consent: Withdraw consent for marketing or non-essential cookies at any time.

To exercise your rights, please contact us at [email protected]. We will respond within one month, as required by law.

9. Security

We implement appropriate technical and organisational measures to protect your personal information, including:

Encryption of sensitive data (e.g. during payment processing).
Secure hosting and regular security updates for our WordPress and WooCommerce platform.
Access controls to limit who can view your data.

However, no system is completely secure, and we cannot guarantee absolute security of your data.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., payment processors or social media platforms). We are not responsible for the privacy practices of these websites. Please review their privacy policies before sharing your information.

11. Children’s Privacy

Our website and services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately at [email protected].

12. Complaints

If you have concerns about how we handle your personal information, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

13. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

Contact Us
If you have any questions or concerns about this Privacy and Cookie Policy, please contact us:

Kandy Kitchen Creations LTD
Unit 3C Moss Mill Industrial Estate
Woodbine Street East
Rochdale OL16 5LB
Tel: 01706 334308
Email: [email protected]