Privacy policy

Last updated: 11 September 2026

This policy explains how Get Sweet uses your personal data. It is written for UK visitors and follows UK GDPR, the Data Protection Act 2018 and PECR.

Who we are

Get Sweet is the trading name of the online sweet shop at getsweet.co.uk. We trade from 57 Ridings Avenue, Great Notley, Braintree CM77 7ZP. For data protection law, Get Sweet is the controller of your personal data.

Questions or requests: hello@getsweet.co.uk.

What we collect

Depending on how you use the site, we may collect:

Contact details — email address, and later your name, delivery address and phone number when you order.
Order details — what you bought, prices, delivery choices and messages you send us.
Payment status — whether a payment succeeded. Card numbers are handled by Stripe, not stored by us.
Technical data — IP address, device and browser type, pages viewed and approximate location, especially once Google Analytics is switched on.
Marketing preferences — whether you asked to hear from us and whether you have unsubscribed.

How we collect it

You give it to us — the coming-soon form, newsletter sign-up, checkout, account or emails to us.
It is created when you use the site — cookies, logs and analytics (see our cookie policy).
Payment providers pass back a result (paid, failed, refunded) so we can fulfil your order.

Why we use it

We only use personal data where we have a lawful basis:

Contract — taking an order, taking payment, packing, posting and handling returns.
Consent — emailing you that we are live, and sending marketing about sweets, drinks, drops and offers. You can withdraw consent any time.
Legitimate interests — running and securing the site, stopping fraud and abuse, and understanding how the shop is used so we can improve it. We will not override your interests or rights.
Legal obligation — tax, accounting, consumer law and answering a lawful request from a regulator or court.

Launch emails and marketing

If you enter your email on our coming-soon page, you are asking us to (1) tell you when Get Sweet goes live and (2) add you to our marketing list. We send a confirmation email first and only add you after you tap the link — that proves you can open the inbox. We will then use that address to send launch news, offers, new products and other Get Sweet emails.

Every marketing email includes an unsubscribe link. You can also email hello@getsweet.co.uk. We will stop marketing messages. We may still email you about an order you placed.

Payments (Stripe)

When the shop is taking orders, payments will be processed by Stripe. Stripe is a separate controller/processor for payment data. We receive confirmation and identifiers we need to match the payment to your order. We do not see or store full card numbers. Stripe’s privacy notice is at stripe.com/gb/privacy.

Analytics (Google Analytics)

We plan to use Google Analytics 4 to see how people find and use Get Sweet — for example which pages are popular and whether checkout works. That uses cookies and similar tech, and Google may process data outside the UK.

Analytics cookies will only be set if you agree, except where the law allows a strictly necessary cookie. You can change your mind in your browser or any cookie banner we add. More detail is in our cookie policy. Google’s notice is at policies.google.com/privacy.

Who we share data with

We do not sell your data. We share it only with people who need it to provide the service, for example:

Our email provider — sending launch and marketing emails.
Stripe — payments and fraud checks.
Google — analytics, if you have allowed those cookies.
Hosting, domain and security providers who keep the website online.
Couriers, once we are posting orders (name, address, phone if you gave one).
Professional advisers or authorities where the law requires it.

Those providers may be in the UK, EEA or other countries. Where data leaves the UK, we expect an approved mechanism such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses, plus whatever extra checks are needed.

How long we keep it

Marketing emails — until you unsubscribe, plus a short record that you opted out so we do not email you again by mistake.
Orders — for as long as we need to fulfil them, handle returns and keep accounting records (typically up to six years for tax).
Analytics — according to Google’s settings, often up to 14 months for reports, with some cookies lasting up to two years.
Server logs — usually a few weeks, unless we are investigating abuse.

Your rights

You can ask us to access, correct, delete or restrict your data, to object to certain uses, or to receive a copy in a portable format. Where we rely on consent, you can withdraw it. These rights are not always absolute — for example we may keep an invoice because the law says so.

Email hello@getsweet.co.uk. We will reply within one month in normal cases. You can also complain to the ICO at ico.org.uk/make-a-complaint.

Children

The site is a general sweet shop, not aimed at children under 13. We do not knowingly collect their data for marketing. If you think we have, tell us and we will delete it.

Security

We use HTTPS and limit access to personal data to people and tools that need it. No website is perfectly secure. Do not send card numbers to us by email.

Changes

We will update this page when the shop, our tools or the law changes. The date at the top is the latest version. Material changes to marketing will be reflected in how we collect consent.