Second Date Snacks
Privacy Policy
This policy explains what personal data Second Date Snacks collects, why we collect it, and the rights you have over it. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last updated: August 2026
1. Who we are
Second Date Snacks is the data controller for the personal data we process. We're a UK-based food business. You can contact us about anything in this policy at abbey@seconddate.co.uk.
2. What data we collect
- Order information — your name, email address, delivery address, phone number (if provided) and what you ordered.
- Payment information — payments are processed securely by our checkout provider (Shopify). We never see or store your full card details.
- Subscription details — your chosen products, delivery frequency and billing schedule if you subscribe.
- Marketing preferences — your email address if you sign up to our newsletter, and whether you've opened or clicked our emails.
- Technical data — your IP address, browser type and how you use our site, collected via cookies and similar technologies.
3. How we use your data & our lawful bases
- To fulfil your order (contract) — processing payment, packing and delivering your dates, and contacting you about your order.
- To manage your subscription (contract) — billing you and delivering at your chosen frequency.
- To send marketing emails (consent) — only if you've opted in. Every email has an unsubscribe link.
- To improve our site and products (legitimate interests) — understanding what's popular and fixing what's broken.
- To meet legal obligations — such as tax and accounting records.
4. Who we share your data with
We never sell your personal data. We only share it with the trusted providers who help us run the business:
- Shopify — our ecommerce platform and secure checkout.
- Royal Mail — to deliver your order (name and address only).
- Our subscription app — to manage recurring orders.
- Email service provider — to send newsletters you've signed up for.
Some of these providers process data outside the UK. Where they do, we make sure appropriate safeguards are in place (such as UK adequacy regulations or standard contractual clauses).
5. How long we keep your data
We keep order and transaction records for up to 6 years to meet our legal and tax obligations. Marketing data is kept until you unsubscribe. Technical data is kept for a much shorter period (typically up to 12 months). When data is no longer needed, it's deleted or anonymised.
6. Your rights under UK GDPR
You have the right to:
- Access a copy of the personal data we hold about you
- Correct any inaccurate or incomplete data
- Ask us to delete your data ("the right to be forgotten")
- Restrict or object to how we process your data
- Data portability — receive your data in a usable format
- Withdraw consent for marketing at any time
- Not be subject to purely automated decisions that significantly affect you
To exercise any of these rights, email abbey@seconddate.co.uk. We'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we handle your data.
7. Cookies
Our site uses cookies to keep your bag working, remember your preferences, and understand how the site is used. Essential cookies are required for the site to function; you can control or delete cookies at any time through your browser settings, though parts of the site may not work without them.
8. Security
We take reasonable technical and organisational measures to protect your data. Payments are processed over encrypted connections, and access to personal data is limited to those who need it to run the business.
9. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the date it was last updated.