Privacy Policy

Tubbs Desserts Ltd — Version 1.0
Last updated: 22 November 2025

At Tubbs Desserts Ltd (“Tubbs”, “we”, “us”, “our”), we’re committed to protecting your personal information and being transparent about how we use it. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have under UK data-protection laws.

By using our website, placing an order, contacting us or interacting with our content (including on Instagram and WhatsApp), you agree to the practices described here.

Tubbs Desserts Ltd is the data controller of your personal information.

1. Personal Information We Collect

“Personal information” means data that identifies you or can be linked to you. We collect the following categories depending on how you interact with us:

Contact Information

  • Name

  • Email address

  • Billing & delivery address

  • Phone number

Account Information

  • Username and login details

  • Preferences and saved addresses

Order & Transaction Data

  • Items viewed, added to basket or purchased

  • Order history, delivery notes and returns

  • Payment confirmations (we do not store card numbers)

Communications & Support

  • Messages sent via email, WhatsApp, Instagram or our website

  • Customer service enquiries

Device & Usage Data (collected automatically)

  • IP address

  • Browser type and device information

  • Login logs and session data

  • Cookies, pixels and similar tracking technologies

  • Inferred preferences (e.g., flavours browsed)

Marketing & Advertising Data

  • Email engagement (opens/clicks)

  • Interaction with our ads on platforms such as Meta (Facebook/Instagram)

  • Cookie-based identifiers used for analytics or personalised advertising

Delivery Information

  • Delivery address, access instructions, and contact details needed to complete frozen deliveries

  • Information provided to courier partners to fulfil an order

We do NOT collect:

  • Special category data (e.g., health, ethnicity, biometrics)

  • Data from children (our services are for ages 18+)

Please do not provide sensitive information in your communications with us.

2. How We Collect Personal Information

We collect data in four ways:

Directly from you

When you create an account, place an order, join our waitlist, message us or update your preferences.

Automatically

Through cookies, analytics tools, Shopify’s site technology and Meta’s tracking integrations (with your consent where required).

From service providers

Payment processors, delivery partners, analytics providers, Shopify, and email/marketing platforms.

From third parties

Social platforms (e.g., Instagram) when you interact with our content or contact us there.

3. How We Use Your Personal Information

We use your information for the following purposes:

A. To provide and improve our services

  • Process and fulfil orders

  • Take payment and issue refunds

  • Arrange frozen deliveries

  • Manage your account

  • Remember preferences and improve the website

B. To communicate with you

  • Order confirmations and delivery updates

  • Responses to messages via email, Instagram or WhatsApp

  • Customer service support

C. Marketing (with your consent where required)

  • Send promotional emails

  • Show relevant ads on our website, Meta platforms or other sites

  • Analyse preferences to improve marketing relevance

D. Security & Fraud Prevention

  • Verify identity

  • Detect or investigate fraud or misuse of our services

E. Legal & Compliance

  • Comply with tax, accounting and regulatory duties

  • Respond to lawful requests from authorities

4. Lawful Basis for Processing (UK GDPR)

We only process personal data where we have a legal basis:

Contract

To fulfil your order, deliver your products, process returns, and manage your account.

Legitimate Interests

For activities such as:

  • Improving our website

  • Preventing fraud

  • Analytics and service improvements

  • Sending marketing to existing customers (soft opt-in)

Consent

For:

  • Non-essential cookies

  • Email marketing (where required)

  • Targeted advertising tracking (e.g., Meta Pixel)

  • WhatsApp/Instagram messaging if initiated by you

You can withdraw consent at any time.

Legal Obligation

For tax, accounting and regulatory compliance.

5. Meta Platforms (Instagram, Facebook & WhatsApp)

We use Meta tools for advertising, analytics and communication.

When you interact with Tubbs via Instagram, Facebook or WhatsApp:

  • Meta may receive information about your actions on our website (via Meta Pixel, with your consent).

  • Meta may combine this with your activity on its platforms to personalise ads and measure performance.

  • When you message us via Instagram or WhatsApp, Meta processes your phone number, message content and metadata under its own privacy policy.

You can manage personalised advertising via your Meta account or at:
www.aboutads.info/choices

6. How We Share Personal Information

We share your information only where necessary:

A. With Shopify (e-commerce platform)

Shopify processes most store-related data and may store it in the UK, EU, Canada, or USA using appropriate safeguards.

B. With service providers

Including:

  • Payment processors (Stripe, PayPal, Klarna)

  • Delivery partners (cold-chain couriers & cargo-bike riders)

  • IT hosting and email providers

  • Analytics tools (e.g., Shopify Analytics, Google Analytics if enabled)

  • Marketing platforms (e.g., Meta, email providers)

C. With advertising partners

Such as Meta, where we may share hashed identifiers for campaign measurement and targeting (with consent).

D. With your authorisation

For example, referrals or social media integrations.

E. Legal purposes

To protect rights, comply with law, prevent fraud or respond to lawful requests.

F. Business transactions

In the event of a merger, acquisition or business sale.

7. Cookies & Tracking Technologies

We use the following categories of cookies:

  • Essential cookies (required for the site to function)

  • Performance/analytics cookies

  • Functional cookies

  • Advertising/targeting cookies, including Meta technologies

You can manage your cookie preferences through our cookie banner or your browser at any time.
Non-essential cookies are only set with your consent.

8. Third-Party Links

Our website may link to third-party sites we do not control.
We are not responsible for their privacy practices. Please review their policies before sharing personal information.

9. Children’s Privacy

Our services are not directed to individuals under 18 years of age.
We do not knowingly collect personal data from children.
If you believe a child has provided information, contact us and we will delete it.

10. Security & Retention

Security

We implement reasonable technical and organisational measures, including:

  • TLS encryption

  • Access controls and password protection

  • Restricted staff access to personal data

  • Secure hosting by Shopify and other providers

  • Staff training on data handling

No system is 100% secure, but we work to protect your information.

Retention

We keep personal information only as long as necessary:

  • Order & transaction records: 6 years (legal requirement)

  • Marketing data: up to 2 years after last contact, unless you unsubscribe

  • Account data: until you close your account

  • Device & analytics data: generally up to 12 months

  • Customer support messages: up to 24 months

When no longer needed, data is securely deleted or anonymised.

11. Your Rights

You may have the following rights under UK data-protection law:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion (“right to be forgotten”)

  • Object to certain processing

  • Restrict processing

  • Data portability

  • Withdraw consent (e.g., marketing or cookies)

To exercise your rights, contact us using the details below.
We may request proof of identity before responding.

We will not discriminate against you for exercising your rights.

12. Complaints

If you have concerns, please contact us first — we will do our best to resolve them.

You also have the right to complain to the UK Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/

13. International Data Transfers

Where personal data is transferred outside the UK or EEA (e.g., by Shopify or Meta), we rely on recognised safeguards such as:

  • The UK International Data Transfer Agreement (IDTA)

  • The EU Standard Contractual Clauses (SCCs)

  • UK government or EU adequacy decisions

14. Changes to This Privacy Policy

We may update this policy from time to time.
The most recent version will always be posted here with an updated “Last updated” date.
We will notify you of significant changes where required by law.

15. Contact Information

Tubbs Desserts Ltd
Trading address (Distribution Hub):
Dephna House, 24–26 Arcadia Avenue, Finchley Central, London N3 2JU

Registered office:
3rd Floor, 86–90 Paul Street, London EC2A 4NE

Email (general enquiries): hello@tubbsdesserts.com
Email (data protection): privacy@tubbsdesserts.com
Company No.: 16474362
VAT No.: GB 496 0654 58