Privacy Policy

🛡️ 1. UK GDPR & Data Protection Commitment

One Up Chocolate Bar Official (“we”, “us”, “our”) is dedicated to safeguarding your personal data and respecting your privacy rights. This policy outlines how we handle, process, and protect your information in full accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: One Up Chocolate Bar Official • Website: https://oneupchocolatebarofficial.co.uk • Email: info@oneupchocolatebarofficial.co.uk

📊 2. What Personal Data We Collect

We only collect information strictly necessary to fulfill orders, facilitate customer service, and ensure security:

• Identity & Contact Details: Full name, email address, telephone number, billing address, and UK shipping address.
• Order & Transaction Records: Order history, purchased items, basket details, and date/time of transactions.
• Payment Data: All payments are processed through encrypted 256-bit SSL gateways. We never store, record, or retain your raw debit/credit card numbers or CVV codes on our servers.
• Technical Information: IP address, device type, browser specifications, and session tokens utilized solely for order session management and fraud detection.

⚖️ 3. Lawful Basis & Purposes of Data Processing

Under UK GDPR Article 6, we process your personal data under the following lawful bases:

• Contractual Performance: To process, pack, and deliver your orders via Royal Mail, and to communicate order tracking and status updates.
• Legal Obligation: To comply with UK tax, financial accounting, and trade statutory requirements.
• Legitimate Interests: To prevent fraud, ensure website security, and resolve customer support inquiries.

🔒 4. Third-Party Data Sharing & Protection

We never sell, rent, monetize, or trade your personal data to third parties. Data is only shared with verified operational service providers under binding data processing agreements:

• Royal Mail Group Ltd: Delivery name, address, and email for parcel dispatch and SMS/email tracking updates.
• PCI-DSS Compliant Payment Gateways: Secure tokenized transaction settlement.

🍪 5. Cookie Policy

Our site uses strictly necessary session cookies essential for shopping cart functionality, secure checkout authentication, and preserving your items as you navigate. We do not deploy intrusive third-party cross-site advertising tracking cookies.

👤 6. Your Statutory Rights Under UK GDPR

As a UK resident, you possess the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete records.
• Erasure (“Right to be Forgotten”): Request deletion of your personal records where no statutory tax obligation requires retention.
• Data Portability: Request an export of your information in a standard machine-readable format.

To exercise any of these rights, email our Data Protection Officer at info@oneupchocolatebarofficial.co.uk.