Privacy Policy

Last Updated: 19 August 2026

At Adrian Oliver Chocolates (“we,” “us,” or “our”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit or make a purchase from www.adrianoliverchocolates.co.uk (the “Site”), and outlines your privacy rights under UK law.

  1. Who We Are (Data Controller)

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for your personal data is:

  • Business Name: Adrian Oliver Chocolates
  • Sole Trader / Business Owner: Paul Holt
  • Postal Address: 115 Park Road, Bolton, BL3 1DJ
  • Email Address: adrianoliverchoc@yahoo.com
  1. The Personal Data We Collect

We only collect personal data that is necessary to process your orders, improve our website, and communicate with you. This includes:

  • Identity Data: First name, last name.
  • Contact Data: Billing address, delivery address, email address, phone number.
  • Financial & Transaction Data: Payment card details (processed securely via our payment gateways), details of products you have purchased, and order history.
  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and device information automatically collected when you browse the Site.
  • Marketing & Communications Data: Your preferences regarding receiving promotional emails from us.

We do not collect any Special Category Data (such as health details, religious beliefs, or political opinions) nor do we access contacts, media files, or location data from your device.

  1. How We Use Your Personal Data & Our Lawful Basis

Under the UK GDPR, we must have a valid legal reason (lawful basis) to process your personal data:

Purpose / Activity Type of Data Lawful Basis under UK GDPR
Processing and delivering your order (taking payments, managing deliveries, sending order updates) Identity, Contact, Financial, Transaction Performance of a Contract with you
Managing our customer relationship (answering queries, managing refunds, sending policy updates) Identity, Contact, Transaction Performance of a Contract or Legal Obligation
Sending promotional emails / marketing (e.g., updates on new chocolate collections) Identity, Contact Consent (if you opt in) or Legitimate Interests (for existing customers, where soft opt-in applies)
Running and securing the Site (troubleshooting, system maintenance, fraud prevention) Technical, Identity Legitimate Interests (to ensure site security and run our business effectively)
Website analytics & performance (understanding how visitors use the Site) Technical, Usage Consent (via Cookie banner)
  1. How We Share Your Personal Data

We do not sell or rent your personal information to third parties. We only share your data with trusted service providers who help us operate our business:

  • Payment Processors: Secure third-party gateways (e.g., Stripe, PayPal, Klarna) to process your payments safely.
  • Delivery & Courier Services: Postal and courier services (e.g., Royal Mail, DPD) to deliver your purchases.
  • Website Hosting & IT Services: Web host, e-commerce platform providers, and email service providers.
  • Professional Advisers & Legal Authorities: Accountants, lawyers, or law enforcement agencies if required to comply with a legal obligation or prevent fraud.

All third-party service providers are required to respect the security of your personal data and treat it in accordance with UK law.

  1. International Data Transfers

Where possible, we store and process your data within the UK or European Economic Area (EEA). If any of our service providers transfer your personal data outside the UK, we ensure a similar degree of protection by confirming that:

  • The country has been deemed to provide an adequate level of data protection by the UK government; or
  • Approved contractual mechanisms (such as the UK International Data Transfer Agreement) are in place to safeguard your data.
  1. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users, enhance your browsing experience, and analyse website traffic.

  • Essential Cookies: Required for the operation of our website (e.g., keeping items in your shopping cart).
  • Analytics / Marketing Cookies: Used only if you consent via our cookie banner upon visiting the Site.

You can manage or disable cookies at any time through your browser settings or via our site’s Cookie Banner.

  1. How Long We Keep Your Data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.

  • Order & Financial Records: Retained for 6 years following the end of the financial year to comply with UK tax obligations (HMRC requirements).
  • Marketing Data: Retained until you withdraw your consent or unsubscribe.
  1. Your Legal Rights Under UK GDPR

Under UK data protection laws, you have rights regarding your personal information:

  • Right of Access: Request a copy of the personal data we hold about you (a “Subject Access Request”).
  • Right to Rectification: Request correction of incomplete or inaccurate data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where there is no good reason for us continuing to process it.
  • Right to Restrict Processing: Ask us to suspend the processing of your personal data.
  • Right to Data Portability: Request the transfer of your data to you or a third party in a structured, machine-readable format.
  • Right to Object: Object to our processing of your data where we rely on a legitimate interest or direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data (e.g., for marketing).

To exercise any of these rights, please contact us at adrianoliverchoc@yahoo.com. We aim to respond to all valid requests within one month.

  1. How to Contact Us or Lodge a Complaint

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: adrianoliverchoc@yahoo.com
  • Post: 115 Park Road, Bolton, BL3 1DJ

You also have the right to make a complaint at any time to the UK regulator for data protection issues:

Information Commissioner’s Office (ICO)

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.