top of page
Privacy Policy

​

The page below describes  how your personal information is collected, used and disclosed when you visit www.thechocspot.co.uk (the "Site").

​

Last updated: Jun18 2026

 

The Choc Spot customer privacy notice

 

The Choc Spot (“we”, ”us”, ”our”) operates this store and website including all related information, content, tools,  features, products and services in order to provide you, the user/customer, with an engaging experience (the “services”). 

This privacy notice describes how your personal information is collected, used and disclosed when you visit www.thechocspot.co.uk (the "Site"), make a purchase or otherwise communicate with us.  We are the data controller for the purposes of UK data protection law.

By using and accessing the site and services you acknowledge that you have read this privacy policy and understand the collection, use and disclosure of your information as described below.

 

This policy explains

  • What personal data we collect

  • How and Why we use it

  • Who we share it with

  • Your Data Security

  • Changes

  • Contact Us

 

Our Contact details

Email: contact@thechocspot.co.uk

​

Personal information we collect and use

The term “personal information” refers to information that identifies or can reasonably be linked to a person.  It does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to an individual.

 

We collect or use the following information to provide services and goods, including delivery, service updates or marketing purposes:

  • Name, phone number and email contact details

  • Billing and delivery address

  • Payment details (including card or bank information for transfers and direct debits)

  • Health information (eg. food allergies if booking onto baking workshops or cooking clubs)

  • Website user information (including user journeys and cookie tracking)

  • Account information, including preferences and settings

  • Comms Information relating to compliments, customer inquiries or complaints

  • Marketing preferences

  • Recorded images, such as photos for google reviews

 

 

Why we collect your Personal Info 

We use your Personal Information for:

Providing and improving the Site and Services, including fulfilling your orders, sending notifications related to your orders or account, to process purchases and to create, maintain and manage your account.

Like many sites, when using the site, certain information is automatically collected from your browser about your device ("Device data").  This includes information such as your IP address, browser type, time-zone, and some of the cookies that are installed on your device as well as information about how you interact with the Site, pages you visit, time and what websites or search terms referred you to the site.

We use the Device data that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of any marketing campaigns).

Additionally when you make a purchase we collect personal details directly from you to process the order (Order information).  We never retain or store your payment details.  Our payment system is supplied by Wix.com

We use your Order Information to fulfill any workshop orders placed through the site (including processing your payment information, arranging delivery and providing you with order confirmation).  We will also use this Order Information to communicate with you regarding further workshop details.

Marketing communications, if you opt in, we may send you marketing emails about our products, events or offers.  You can unsubscribe at any time via the link in the email.  We do not sell your personal information.

Security and Fraud prevention, we use your personal information to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, protect public safety and to secure our services,

Communicating with you in terms of customer support, to provide effective services to you and maintain our business relationship.

We will not share your information with any third party companies for marketing purposes.

By using the Site, you agree to the automatic collection of Device data and Order information and use of this information in accordance with this policy.

​

Who we share your data with

In certain circumstances we may share your personal information with trusted third parties to operate our business, including:

  • E-commerce platform, order and fulfilment, payment providers – wix.com platform

  • Email marketing  and analytics – wix.com platform

 

Our site is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.  

 

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

 

All third parties act as data processors and are required to process your data securely and only on our instructions.

 

If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions.  We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of information found on these sites.

 

Children’s Data

 

Our website and services are intended strictly for use by adults. We do not knowingly collect personal data directly from children under the age of 18. All website use, bookings, and communications must be conducted exclusively by a parent, guardian, or carer.

When a parent or guardian books a baking workshop, we request limited information about the attending child (specifically: name, age/year group, and relevant dietary requirements or food allergies). This information is collected solely to ensure the child’s safety, protection, and support during the session.

We do not share this information with third parties, except where strictly necessary to protect the vital interests of the child (such as sharing allergy information with emergency medical services). This data is kept securely in password-protected spreadsheets and secure booking platform and is permanently deleted 30 days after the end of term or the workshop concludes.

 

 

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information.  We rely on the following legal bases:

  • Consent – marketing communications and non-essential cookies

  • Contract – we have to collect or use information so we can fulfil and deliver your order

  • Legal obligation – we have to collect or use your information so we can comply with the law, in terms of accounting, tax and regulatory compliance.

  • Legitimate interests – improving our services, logistics and website performance

 

You have the right to:

  • access - You have the right to ask us for copies of your personal information.

  • correction - You have the right to ask us to correct personal information you think is inaccurate or incomplete.

  • delete - You have the right to ask us to delete your personal information.

  • Restrict or object to processing - You have the right to ask us to limit how we can use your personal information.

  • Request data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

  • Withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. If you make a request, we must respond to you without undue delay..

 

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.  You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO)

​

Cookies (not the edible kind)

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive to help websites improve user experience.

Like many sites, we use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

​

Cookies we use

  • Strictly necessary cookies – required for the website to operate and cannot be disabled

  • Performance & analytics cookies – to help us understand how visitors use our website (eg. Google Analytics)

  • Marketing & Advertising cookies – used to deliver relevant ads and track campaign performance (not currently in use)

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies.

 

Third-Party cookies

Some cookies are placed by third-party services we use.  We do not control these cookies directly and recommend reviewing the relevant third-party privacy policies.

 

Your Data Security

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

We retain your personal data only for as long as necessary in order to fulfil orders, provide you with services (until you unsubscribe or withdraw consent), comply with legal obligations, resolve disputes or enforce other applicable contracts or policies.

 

Changes to this Policy 

We may update or change our Privacy Policy at any time to reflect changes in our business or other legal, regulatory or operational reasons.  We will post the revised policy on this website and update the last updated dates as required by law.

 

​Contact Us

If you have any questions about this Privacy Policy, or how we handle your personal data, or any complaints about how we process your personal information,  please contact us at:

contact@thechocspot.co.uk

​

bottom of page