Coco Jumbo Privacy Policy
Last updated: 23 November 2025

1. Who We Are
Coco Jumbo™ ("we", "us", or "our") operates www.cocojumbo.co.uk. We sell handmade NYC-style cookies baked fresh to order. Our business is based in the UK.

2. What Data We Collect
When you order or contact us, we collect:

• Name, email, delivery address, phone number

• Payment details (processed securely via Stripe or PayPal)

• Cookies (for website functionality and analytics)

3. How We Use Your Data
We use your data to:

• Process and deliver your cookie orders

• Respond to inquiries via email or contact form

• Send order updates and marketing emails (only if you opt in)

• Improve website experience and customer service

4. Legal Basis for Processing
We process your data based on:

• Contractual necessity (to fulfill your order)

• Legitimate interest (customer service, website improvement)

• Consent (for marketing emails)

5. Data Sharing & Security
We do not sell your data. We may share it with:

• Stripe & PayPal: For secure payment processing. These processors collect your name, billing address, and payment details. We do not store card information.

• Kit: For email marketing. Your name and email are stored securely and used only if you opt in.

• Google Analytics: To understand how visitors use our site. Data is anonymised and used only for performance insights.

Your data is stored securely on encrypted servers. Payment details are never stored on our system.

6. Your Rights
Under UK GDPR, you have the right to:

• Access, correct, or delete your data

• Object to processing

• Withdraw consent (e.g., unsubscribe from emails)

• Request data portability

To exercise these rights, please contact us via our contact page.

7. Cookies
Our website uses essential cookies for functionality. We use Google Analytics (anonymised) to improve user experience. You’ll see a cookie banner to manage preferences.

8. Data Retention
We keep order data for 5 years for tax and accounting purposes. Marketing lists are retained until you unsubscribe.

9. Changes to This Policy
We may update this policy. The latest version will always be posted here.

10. Contact Us
For privacy questions, contact us via our contact page.

For complaints, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk.