Privacy Policy

Last updated: 18 November 2025

Sugar&Crumb is committed to protecting your personal information and being transparent about how it’s used. This Privacy Policy explains what data I collect, why I collect it, and how it’s stored and protected.

If you have any questions, you can contact me at: info@sugarandcrumbgf.com

1. Who We Are

Business name: Sugar&Crumb
Owner: Jessica O'Leary
Address: Ponthir, South Wales, NP18 1PD
Email: info@sugarandcrumbgf.com
Website: https://www.sugarandcrumbgf.com/

Sugar&Crumb is the Data Controller, meaning I decide how your information is used.

2. What Personal Data I Collect

I collect information in order to process your orders, respond to enquiries and operate the website. This includes:

  • Order information: name, address, email, phone number

  • Payment information: processed securely by third-party payment providers

  • Website analytics: IP address, browser type, device info (via cookies)

  • Contact form details: your name, email and message

  • Email marketing: only if you actively subscribe

I do not collect any special category data unless you voluntarily share allergen information in a message.

3. How Your Data Is Used

Your information is used to:

  • Process and fulfil your orders

  • Manage deliveries and send updates

  • Respond to enquiries

  • Send marketing emails (only if you subscribe)

  • Improve website performance

  • Meet legal, tax and accounting requirements

I will never sell your data or share it with companies for their marketing.

4. Legal Grounds for Processing Your Data

Under UK GDPR, I use the following legal bases:

  • Contract: to process and deliver your order

  • Consent: for email marketing

  • Legitimate interest: website analytics and preventing fraud

  • Legal obligation: keeping tax and financial records

5. Sharing Your Personal Data

Your data is only shared with trusted third-party partners necessary for running the business, such as:

  • Payment processors (Stripe, PayPal, or Squarespace Payments)

  • Delivery providers (DPD)

  • Website hosting platform (Squarespace)

  • Email marketing service (if used)

These providers follow their own GDPR-compliant processes.
Your payment card details are never stored by Sugar&Crumb.

6. Cookies

Sugar&Crumb uses cookies to:

  • Enable website functionality

  • Analyse website traffic

  • Improve user experience

You can manage cookie preferences through your browser settings or via the cookie banner on the website.

For more details, please see the Cookie Policy.

7. How Long Your Data Is Kept

Your information is kept only for as long as necessary:

  • Order records: 6 years (legal requirement)

  • Marketing emails: until you unsubscribe

  • Analytics data: typically 14–26 months (depending on provider)

You can request deletion of your data at any time (unless it must be retained for legal reasons).

8. How Your Data Is Protected

I take data protection seriously. Your information is kept secure through:

  • Encrypted website (HTTPS)

  • Password-protected systems

  • Secure third-party payment processors

  • Restricted access to personal data

No method of transmission is 100% perfect, but I follow best practices to keep your data safe.

9. Your Rights Under UK GDPR

You have the right to:

  • Access the personal data I hold

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Withdraw consent (for marketing)

  • Move your data to another provider

To make a request, email: info@sugarandcrumbgf.com

I will respond within 30 days.

10. Email Marketing

You will only receive marketing emails if you choose to subscribe.

You can unsubscribe at any time using the link in the email or by contacting me directly.

11. Links to Other Websites

This website may contain links to third-party sites (for example, Instagram, Facebook or payment providers).
Sugar&Crumb is not responsible for their privacy practices, so please check their policies.

12. Changes to This Policy

This Privacy Policy may be updated occasionally to reflect changes in the law or the business.
The date at the top shows when it was last updated.

13. Contact

If you have questions about your personal data or this policy, please email:

📧 info@sugarandcrumbgf.com

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.