1. Information We Collect

We collect personal data when you visit our website, create an account, or make a purchase. The personal data we collect may include:

Personal Identification Information: Name, address, email address, phone number.

Payment Information: Credit card details (processed securely by Stripe), billing information.

Order Information: Product details, shipping information, and order history.

Technical Data: IP address, browser type, device information, and usage data related to your interactions with our website.

2. How We Use Your Information

We process your personal data for the following purposes, in compliance with the UK GDPR:

To process and fulfil your orders, including shipping and delivery.

To communicate with you regarding your orders, including sending order confirmations, receipts, and customer service inquiries.

To process payments securely through Stripe.

To improve your shopping experience.

To send marketing communications (only if you have opted-in).

To comply with legal obligations.

We process your data based on the following lawful bases under the UK GDPR:

Performance of a contract: Processing personal data to complete your order and provide customer support.

Legal obligation: To comply with tax, legal, or regulatory requirements.

Consent: Where you have provided your consent, particularly for marketing communications.

Legitimate interests: For fraud prevention and improving services.

3. How We Share Your Information

We do not sell or rent your personal data to third parties. However, we may share your data in the following cases:

Payment Processing: We use Stripe as our payment gateway. When you make a purchase, your payment details are securely processed by Stripe. For more information on Stripe’s data processing practices, please review their Privacy Policy.

Legal Compliance: We may disclose your personal data to comply with legal obligations, such as responding to a court order, regulatory authority, or other legal requests.

4. Data Security

We take the security of your personal data seriously. We have implemented appropriate measures to protect your personal data.

For payment transactions, Stripe uses encryption to protect your payment information during processing. We also use SSL encryption to protect data during transmission over the internet. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

5. Cookies and Tracking Technologies

Our website uses cookies to enhance your experience, analyse site usage, and offer personalised content. Cookies are small text files placed on your device to store information about your browsing behaviour.

You can manage your cookie preferences through your browser settings. If you prefer not to accept cookies, you may still use our site, but some features may not work as intended.

6. Your Rights Under the UK GDPR

As a UK resident, you have several rights concerning your personal data under the UK GDPR:

Right to Access: You can request a copy of the personal data we hold about you.

Right to Rectification: You can request to have inaccurate or incomplete personal data corrected.

Right to Erasure: You can request that we delete your personal data, subject to certain conditions.

Right to Restrict Processing: You can request that we limit the processing of your personal data in certain circumstances.

Right to Object to Processing: You can object to the processing of your personal data, particularly for direct marketing or processing based on legitimate interests.

Right to Withdraw Consent: You can withdraw your consent for marketing communications at any time.

To exercise these rights, please contact us using the details below.

7. Retention of Your Data

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law.

8. International Transfers

If your personal data is transferred outside the UK or the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your data.

9. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or the services we offer. Any changes will be posted on this page, and the updated date will be shown at the top of the page.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your rights under the UK GDPR, please contact us at:

Aluva Ltd

Email: aluvachocolates@mail.com

Phone: +44 7825 402721

Registered Office Address: 61 Bridge Street, Kington, United Kingdom, HR5 3DJ

By using our website, you agree to the terms outlined in this Privacy Policy. Thank you for choosing Aluva Ltd.