Privacy and cookies

Sugar & Co is the trading name of Bake, Make and Serve. We are the data controller for the information you share with us, and we only collect what we need to sell, pack and deliver sweets to you.

When you order: your name, email address, phone number if you give one, delivery address and the contents of your order. This is what we need to take payment, pack your parcel and send your confirmation.

When you write a review: your name, email address and your review, along with the product you reviewed. Published reviews show your name and review text — never your email address.

When you contact us or send an event enquiry: whatever you choose to tell us, so that we can reply.

Card payments are handled by Stripe. Your card details are entered on Stripe's secure checkout and are never stored on, or seen by, our own systems. We receive only confirmation that the payment succeeded and the transaction reference.

We keep your bag in your browser's local storage so it survives a page refresh — that is the only way we can show you what you have added. We also use a bot-protection check on checkout and on forms to keep spam away from orders and enquiries.

We count anonymous visits to understand which pages people find useful. This does not identify you and is not used for advertising.

Our payment provider Stripe receives what it needs to take and refund payments. Royal Mail receives the name, address and contact details needed to deliver your parcel. We do not sell your information, and we do not share it with anyone else except where we are required to by law.

Order and payment records are kept as long as we need them for accounting, tax and customer service. Your bag stored in your browser stays until you empty it or clear your browser data. Emails and enquiries are kept until they have been dealt with and for as long as we need them for a record of the conversation.

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Email mail@sugarandco.uk and we will respond within one month. If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office (ico.org.uk).