Privacy Policy

At Mrs Candyland, we are committed to protecting your privacy and ensuring your personal information is handled securely, responsibly, and in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, place an order, contact us, or interact with our services.

By using our website, you agree to the practices outlined in this Privacy Policy.

1. Who We Are

Mrs Candyland is a UK-based family-owned and family-run online sweet shop specialising in:

  • Premium Halal Pick N Mix
  • Imported sweets & snacks
  • Chocolates & confectionery
  • Viral TikTok treats & drinks

Throughout this policy, “we”, “us”, and “our” refer to Mrs Candyland.

Our website is hosted and powered by Shopify.

2. Information We Collect

When you visit our website or place an order, we may collect the following information:

Personal Information

  • Full name
  • Billing address
  • Delivery address
  • Email address
  • Phone number

Order Information

  • Products purchased
  • Order history
  • Delivery preferences
  • Customer service communications

Payment Information

Payments are securely processed by trusted third-party payment providers. We do not store full payment card details on our servers.

Technical & Device Information

  • IP address
  • Browser type
  • Device information
  • Time zone
  • Cookies and browsing activity
  • Website interaction data

Marketing Information

  • Email marketing preferences
  • SMS marketing preferences
  • Competition or giveaway entries
  • Social media interactions

3. How We Use Your Information

We use your information to:

  • Process and fulfil orders
  • Provide customer support
  • Send delivery and tracking updates
  • Prevent fraud and suspicious activity
  • Improve website functionality and customer experience
  • Process refunds and resolve disputes
  • Send promotional emails or SMS messages (where consent is provided)
  • Comply with legal, tax, and regulatory obligations

4. Legal Basis For Processing

Under UK GDPR, we process your information under the following lawful bases:

  • Contractual necessity (to fulfil your order)
  • Legal obligations
  • Legitimate business interests
  • Customer consent (for marketing communications)

5. Payment Security

We take payment security seriously.

All payments are securely processed through encrypted third-party payment providers and secure checkout systems. Mrs Candyland does not store full debit or credit card information.

Our website uses SSL encryption technology to help protect your data.

6. Marketing Communications

If you opt in to receive marketing communications, we may contact you regarding:

  • New product launches
  • Promotions and discounts
  • Restocks
  • Viral and trending products
  • Competitions and giveaways

You can unsubscribe from marketing communications at any time using the unsubscribe link provided in emails or by contacting us directly.

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

  • Improve website performance
  • Remember customer preferences
  • Analyse traffic and shopping behaviour
  • Personalise content and advertisements
  • Support retargeting and advertising campaigns

We may use third-party analytics and advertising services including:

  • Google Analytics
  • Meta/Facebook Pixel
  • TikTok Pixel
  • Shopify analytics tools

By using our website, you consent to our use of cookies unless disabled through your browser settings.

8. Sharing Your Information

We only share customer information where necessary to operate our business, including with:

  • Payment processors
  • Delivery couriers
  • Website hosting providers
  • Fraud prevention services
  • Marketing platforms
  • Legal or regulatory authorities where required by law

We do not sell, rent, or trade customer personal information to third parties.

9. International Transfers

Some third-party providers we use may process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

10. Data Retention

We retain customer information only for as long as reasonably necessary to:

  • Fulfil orders
  • Maintain business records
  • Comply with tax and accounting obligations
  • Prevent fraud
  • Resolve disputes

When information is no longer required, it will be securely deleted or anonymised.

11. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your information
  • Restrict or object to processing
  • Withdraw marketing consent
  • Request transfer of your data
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, please contact us directly.

12. Children’s Privacy

Our website is not intended for children under 13 years of age without parental supervision.

We do not knowingly collect personal data from children.

13. Third-Party Links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, policies, or content of external websites. Customers should review third-party policies separately.

14. Food & Allergen Disclaimer

Mrs Candyland sells food and consumable products. While we take hygiene and food safety seriously, products may contain or come into contact with:

  • Nuts
  • Peanuts
  • Milk
  • Soy
  • Gluten
  • Wheat
  • Gelatine
  • Other allergens

Customers are responsible for reviewing ingredients and allergen information before consumption.

If you have severe allergies, we strongly recommend contacting us before placing an order.

15. Changes To This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time without prior notice.

Changes will take effect immediately upon posting on our website.

Your continued use of the website constitutes acceptance of any updated policies.

16. Contact Information

For any privacy-related enquiries, requests, or concerns, please contact us through our website contact form or official customer support channels.