Privacy Policy

1. Who we are (Data Controller)

Nanny Wendy's Fudge Kitchen ("we", "us") is the data controller responsible for your personal data. We are based at Belle Vue, Bude, Cornwall EX23 8JL. You can contact us at Info@nannywendyskitchen.co.uk or 01288 488 109.

2. The data we collect

• Identity & Contact Data — name, email, delivery/billing address, phone number.
• Order Data — items purchased, gift messages, order history.
• Payment Data — processed securely by Stripe; we do not store full card details.
• Technical & Usage Data — IP address, browser type, and (with your consent) analytics about how you use the site.
• Marketing Data — your preferences for receiving marketing from us.

3. Lawful basis for processing

• Contract — to fulfil and deliver your orders and subscriptions.
• Consent — for marketing emails and non-essential cookies (you can withdraw consent at any time).
• Legitimate interests — to run, secure and improve our business, where your rights do not override these interests.
• Legal obligation — to keep records required by law (e.g. tax and accounting).

4. Who we share your data with

We use trusted third-party processors who act on our instructions:

• Stripe — payment processing.
• Resend — transactional and marketing email delivery.
• Supabase — secure database hosting for orders and accounts.
• Upstash — rate-limiting to protect our forms and checkout.
• Netlify — website hosting and content delivery.

We never sell your personal data.

5. International transfers

Some of our processors are based outside the UK. Where personal data is transferred internationally, we rely on safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses to ensure your data remains protected.

6. How long we keep your data

We keep order and transaction records for 6 years to meet HMRC and accounting requirements. Marketing data is kept until you unsubscribe or withdraw consent. Enquiry messages are kept for up to 24 months. Where data is no longer needed, we securely delete or anonymise it.

7. Your rights

Under UK GDPR you have the right to:

• access a copy of your personal data;
• request correction of inaccurate data;
• request erasure of your data;
• object to or restrict our processing;
• request data portability;
• withdraw consent at any time.

To exercise any of these rights, email us at Info@nannywendyskitchen.co.uk.

8. Cookies

We use cookies as described in our Cookie Policy. Non-essential cookies are only set with your consent, which you can change at any time via the "Manage Cookies" link in the footer.

9. Complaints

If you have a concern, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

10. Contact us

Email: Info@nannywendyskitchen.co.uk
Phone: 01288 488 109
Address: Belle Vue, Bude, Cornwall EX23 8JL