Privacy Policy

Welcome to Tubbs Desserts Ltd (“Tubbs”, “we”, “us”, “our”). Tubbs operates this store and website, including all related information, content, features, tools, products and services (the “Services”), to provide you, the customer, with a curated shopping experience.

Tubbs is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, disclose and protect your personal information when you visit, use, purchase through or otherwise interact with the Services. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to collection, processing and disclosure of your personal data.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood this Privacy Policy and you agree to the collection, use and disclosure of your information in accordance with this policy.

1. Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies or can reasonably be linked to you (or another person). It does not include anonymous or de-identified information. Depending on how you interact with our Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information (and inferences drawn from that information):

• Contact details: name, address, billing address, shipping address, phone number, email address.
• Financial information: credit/debit card or payment account numbers, payment details, transaction details, payment confirmation and related financial account information.
• Account information: username, password, security questions, your preferences or settings.
• Transaction information: items you view, add to cart, add to wish-list, purchase, return, cancel or exchange; your past orders and order history.
• Communications with us: information you include when contacting customer support or otherwise communicating with us.
• Device and usage information: information about your device, browser, network connection, your IP address, unique device identifiers, and information about how and when you use the Services (including cookies and similar tracking technologies).
• Marketing and advertising data: information about your preferences, interests and how you engage with our advertising or marketing communications.

2. Personal Information Sources

We may collect personal information from the following sources:

• Directly from you: when you create an account, make a purchase, visit or use the Services, subscribe to a newsletter, complete a survey, or otherwise provide your personal data.
• Automatically through the Services: when you browse or use our site, we and our service providers collect device, usage and tracking data (including cookies and similar technologies).
• From our service providers: we engage third-party vendors to enable certain functionalities (such as payment processing, analytics, shipping, marketing) and they may collect or process personal information on our behalf.
• From our partners or third parties: when you use third-party login integrations, social media widgets, or referrals, or when we purchase or obtain data from data-enrichment providers (where applicable).

3. How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use your personal data for the following purposes:

• Provide, tailor and improve the Services. We use your personal information to perform our contract with you, process payments, fulfil orders, manage your account, remember your preferences, arrange shipping or delivery (including our zero-emission cargo-bike deliveries in London), facilitate returns or exchanges, enable product reviews, and recommend items related to your purchases.
• Marketing and advertising. We use your information to send you marketing, advertising and promotional communications by email, text message or post; and to show you online advertisements (including via Shopify’s advertising features) for products or services on our site or other websites, based on your past activity or purchases.
• Security and fraud prevention. We use your information to verify your identity, authenticate your account, secure our Services, detect, investigate or take action regarding suspected fraud, illegal or unsafe activity, protect public safety, and enforce our rights and policies.
• Communicating with you. We use your personal information to provide customer support, respond to your inquiries, send you notifications about your account or orders, and maintain our business relationship with you.
• Legal reasons. We use your personal information to comply with legal obligations, respond to valid legal process (such as subpoenas or search warrants), participate in legal proceedings or investigations, enforce our terms or policies, or protect our rights or those of others.

4. How We Disclose Personal Information

In certain circumstances we may disclose your personal information to third parties, subject to the terms of this Privacy Policy. These circumstances include:

• With Shopify, vendors and other third-party service providers who perform services on our behalf (e.g., IT management, payment processing, analytics, customer support, cloud storage, fulfilment and shipping).
• With business and marketing partners to provide marketing services and serve online advertising to you. For example, we may use Shopify’s systems that support personalised advertising based on your activity across multiple merchants and websites.
• When you direct, request or consent to disclosure of certain personal information to third parties (for example, when you choose to share your data through a social media login integration or refer a friend).
• With our affiliates or within our corporate group.
• In connection with a business transaction (such as a merger, sale, insolvency, bankruptcy, business transfer), to comply with legal obligations, to respond to valid legal process, to enforce our terms or policies, or to protect our rights, customers or Services.
• Where required under applicable law or legal process, or to protect life, health or safety.

5. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties (which may be located in countries other than where you reside) in order to provide and improve the Services for you. In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store and other merchants on Shopify.

In such circumstances, Shopify acts as a data processor or service provider under its own privacy policy and data-processing terms. To learn more about how Shopify uses your personal information and about rights you may have, you can visit the Shopify Consumer Privacy Policy at https://privacy.shopify.com/en.

6. Cookies, Tracking and Consent

We and our service providers use cookies and similar tracking technologies on the Services. These may collect device identifiers, browsing behaviour and other usage data. Where required by applicable law (e.g., UK/EEA), we will ask for your consent before placing non-essential cookies (such as advertising or analytics cookies). You may withdraw or restrict your cookie preferences at any time using the banner on our site or via your browser settings.

7. Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third-parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security practices of such sites, including the accuracy, completeness or reliability of information found on such sites. Information you provide on public or semi-public venues (including information you share on third-party social networking platforms) may also be viewable by other users and/or users of those third-party platforms without limitation as to its use by us or by a third-party. Our inclusion of such links does not imply endorsement of the content or operators of such platforms.

8. Children’s Data

The Services are not intended for children (under the age of majority in your jurisdiction) and we do not knowingly collect personal information from children under that age. If you are a parent or legal guardian and believe your child has provided us with personal information, please contact us using the details below to request deletion. As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined under applicable law) personal information of individuals under 16 years of age.

9. Security and Retention of Your Information

We take the security of your personal information seriously, but please be aware that no security measure is perfect or impenetrable. We cannot guarantee “perfect security”. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure communication channels to send sensitive or confidential information to us.

The length of time we retain your personal information depends on various factors such as whether we need the information to maintain your account, provide Services, comply with legal obligations, resolve disputes or enforce contracts and policies. When we no longer need it for such purposes, or when required by law, we securely delete or anonymise the information.

10. Your Rights and Choices

Depending on where you live, you may have certain rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances. We will satisfy valid requests in line with applicable law. The rights may include:

• Right to Access / Know. You may request access to the personal information we hold about you.
• Right to Delete. You may request that we delete your personal information (subject to certain exceptions).
• Right to Correct. You may request that we correct inaccurate personal information we hold about you.
• Right of Portability. You may request a copy of your personal information and in some cases ask that we transfer it to a third party.
• Managing Communication Preferences. If we send you marketing emails, you may opt-out at any time using the unsubscribe link in those emails. If you opt-out, we may still send you non-promotional emails such as those about your account or orders you have made.

If you live in the UK or the European Economic Area (EEA), and subject to local law, you may additionally have the following rights:

• Objection to Processing / Restriction of Processing: You may ask us to stop or restrict processing of your personal data for certain purposes.
• Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to withdraw that consent. Withdrawing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

You may exercise any of these rights by contacting us via the contact details below. We will not discriminate against you for exercising your rights. We may need to verify your identity before fulfilling your request, and you may designate an authorised agent to act on your behalf (in which case we may require you to provide proof of authorisation and verify your identity directly).

11. Complaints

If you have complaints about how we process your personal information, please contact us using the details provided below. Depending on your jurisdiction, you may also have the right to lodge a complaint with your local data protection supervisory authority (for example, the UK Information Commissioner’s Office or equivalent). For the EEA you can find a list of relevant supervisory authorities online.

12. International Transfers

Please note that we may transfer, store or otherwise process your personal information outside the country where you live. Where we transfer personal information out of the UK or the EEA, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses (SCCs) (or UK-equivalent) unless the destination country has been determined to provide an adequate level of protection.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time (for instance, to reflect changes to our Services, legal or regulatory obligations, or data-processing practices). When we do, we will post the revised policy on this website, update the “Last updated” date at the top of this page, and provide any additional notice as required by applicable law.

14. Contact Information

Company No. 16474362 | VAT No. GB 496 0654 58

For the purposes of applicable data-protection laws we are the data controller of your personal information.

Tubbs®, Tubbs Desserts™ and the “U” logomark are trading names and trademarks of Tubbs Desserts Ltd.