Privacy Policy

The data controller is RAWKIES LTD, 8 The Rock, BL9 0NT, England, United Kingdom. You can reach us at support@rawkiesuk.shop or +44 7615783118 for any privacy question or request.

• —Identity and contact data: name, email, phone (if given) and, for orders, your delivery and billing address.
• —Order and delivery data: the boxes you buy, quantities, gift messages, delivery address, dietary or allergen notes you choose to share, and order history.
• —Membership data: your Treat Club plan, billing interval and subscription status.
• —Payment data: handled by our payment processor. We receive confirmation of payment and limited card metadata (such as card brand and last four digits) — we never receive or store your full card number.
• —Support and enquiry data: messages you send through our contact, wholesale or checkout forms, including anything you choose to include.
• —Technical and usage data: IP address, device and browser type, and essential interactions needed to run the store securely.

• —Directly from you, when you order, build a box, join the Treat Club, or fill in a form.
• —Automatically, through strictly necessary cookies and server logs when you use the site.
• —From our payment processor and delivery carriers, who confirm payment status and delivery progress.

• —To take and fulfil your order and deliver your box — legal basis: performance of a contract.
• —To manage Treat Club memberships and recurring billing — performance of a contract.
• —To provide customer support and handle allergen, delivery, refund and dispute queries — contract and our legitimate interest in running the shop well.
• —To retain checkout and enquiry details as a lead so we can follow up on an incomplete order or question — legitimate interest; you can object at any time.
• —To keep the site secure and prevent fraud and abuse — legitimate interest and legal obligation.
• —To meet tax, accounting and consumer-law obligations — legal obligation.
• —To send marketing only where you have opted in — consent, which you can withdraw at any time.

We share personal data only with processors that help us run the store, under contract and only as needed:

• —Payment processing: Stripe, which handles card payments on its secure hosted checkout. Stripe processes card data as an independent controller/processor; we never see your full card number.
• —Hosting and delivery of the website: our cloud hosting provider (Vercel) and related infrastructure.
• —Database and authentication: Supabase, which stores order, membership, support and lead records.
• —Email: our transactional and support email provider, to send order confirmations and replies.
• —Delivery carriers: the couriers who ship your box, who receive the delivery name and address.
• —Professional advisers and authorities: where required by law, or to establish, exercise or defend legal claims.

We do not sell your personal data.

Some of our processors operate outside the UK and the EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or an adequacy decision, so your data keeps an equivalent level of protection.

• —Order and transaction records: kept as long as needed to fulfil the order and to meet tax and accounting duties (generally up to 6 years).
• —Membership records: kept for the life of the membership and a reasonable period afterwards.
• —Checkout and enquiry leads: kept for up to 24 months, then deleted or anonymised, unless they become an order.
• —Support messages: kept only as long as needed to resolve your query and for reasonable record-keeping.

We use encryption in transit, access controls, and reputable processors. Payments are taken on Stripe's PCI-DSS compliant hosted checkout. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data and to notify you and the relevant regulator where the law requires.

If you are in the UK or EEA, you have the right to:

• —Access a copy of your personal data.
• —Correct inaccurate or incomplete data.
• —Erase your data where there is no overriding legal reason to keep it.
• —Restrict or object to certain processing, including direct marketing.
• —Data portability for data you provided to us.
• —Withdraw consent at any time, without affecting prior processing.

To exercise any right, email support@rawkiesuk.shop. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to your local EEA supervisory authority.

If you are a California resident, you may request to know, access, correct or delete the personal information we hold, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not discriminate against you for exercising your rights. To make a request, email support@rawkiesuk.shop.

We use strictly necessary cookies to run the cart, checkout and secure sessions. Any non-essential or analytics cookies are used only with your consent. See our Cookie Policy for details and how to manage your choices.

We do not make solely automated decisions with legal or similarly significant effects about you. Our Treat Finder and Box Builder give convenience suggestions only and are not automated decision-making about you. The store is intended for adults; children under 13 may not register or order, and those aged 13–17 may only order with the consent and payment authorisation of a parent or guardian.

To ship your box we process your delivery name and address and pass them to the delivery carrier. For order fulfilment and returns or replacement handling, our support team can see your order details and any allergen or delivery notes you provided. Billing and card payment data are handled by Stripe on its hosted checkout; we receive only the payment result and limited card metadata, never your full card number.

We may update this policy from time to time. The "last updated" date above shows the latest version, and material changes will be reflected here.