Privacy policy

Information we collect

We only collect what we need to take payment and get your order to you:

• Your name, email address and phone number.
• Your delivery address and postcode.
• Your chosen delivery date and any order notes or allergy information you give us.
• Order history, including items, quantities and amounts paid.
• Basic technical data such as your browser type and pages visited, used to keep the site working.

Payment information

Card payments are processed by Stripe Payments UK Ltd. Your full card number, expiry date and security code are entered directly with Stripe and are never seen or stored by Guddu Sweets. We receive only a confirmation of payment, the amount, and the last four digits and card brand for reconciliation.

How we use your information

We use your information to:

• Prepare, confirm and deliver your order.
• Contact you about your order, including delivery updates or issues.
• Handle refunds, complaints and food safety or allergy queries.
• Keep accurate accounting and tax records as required by law.

Lawful basis

We process your information to perform our contract with you (fulfilling your order), to comply with legal obligations (tax and food safety records), and for our legitimate interests in running and securing the shop. We only send marketing emails where you have opted in, and you can unsubscribe at any time.

Who we share it with

We never sell your personal data. We share it only with service providers who help us run the shop: Stripe for payments, our website and database hosting provider, and the courier or driver delivering your order. Each only receives what is needed for their part of the job.

How long we keep it

Order and payment records are kept for seven years to meet UK accounting requirements. Contact enquiries that do not lead to an order are deleted within 12 months. Marketing preferences are kept until you unsubscribe.

Your rights

Under UK GDPR you can ask for a copy of the personal data we hold, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable format. Email guddusweets@gmail.com and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies and storage

Your basket is stored in your browser so your items are still there when you come back. We use essential cookies needed for checkout and security. We do not run advertising or third-party tracking cookies.

Contact

Privacy questions: guddusweets@gmail.com or 07478237090. Guddu Sweets, Edinburgh, United Kingdom (online only — no shop or collection point).