Privacy Policy.

• Order data: name, delivery address, billing address, email, phone (optional), basket contents and payment confirmation. Card numbers never reach our server: the payment provider named at checkout handles them directly.
• Account data: if you create an account, your password is salted and hashed by WordPress core. We see only the hash.
• Communications: email replies, contact form submissions and returns correspondence.
• Visits: our own server counts visits and pages read, using a random visit number kept in the sweeties_sid cookie, and never shares it. If you accept statistics cookies, WooCommerce also notes which website or campaign brought you here, so an order can show where it came from. We use no advertising cookies.

Order records are kept for 7 years to satisfy HMRC bookkeeping rules. Account profiles persist until you ask us to delete them. Email correspondence is kept for 24 months and then purged.

You can request a copy of your data, ask us to correct it, ask us to delete it, or withdraw any optional consent. Email hello@sweeties.net with the subject line “Data request” and we will respond within 30 days. You can also complain to the Information Commissioner’s Office if you are not satisfied.

Royal Mail receives your delivery name and address. The payment provider named at checkout receives the payment amount and your billing details. We never sell email lists.