Privacy policy


Last updated: June 2025 

Cheshire Pie Company Ltd operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience (the "Services"). Cheshire Pie Company Ltd is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

For the purpose of applicable data protection laws, Cheshire Pie Company Ltd is the data controller of your personal information. We are registered with the Information Commissioner's Office (ICO) under registration number ZB070651. Our registered address is 8 Bold Street, Sandbach, CW11 1GR.

1. Personal Information We Collect

When we use the term "personal information" we mean information that identifies or can reasonably be linked to you. We may collect or process the following categories, depending on how you interact with the Services:

  • Contact details - your name, address, billing address, shipping address, phone number, and email address.
  • Financial information - payment card information, transaction details, form of payment and payment confirmation. We do not store your full card number; payments are processed securely via Shopify Payments and/or other PCI-DSS compliant Shopify-approved payment providers.
  • Account information - your username, password, security questions, preferences and settings.
  • Transaction information - items you view, add to your basket or wishlist, purchase, return, exchange or cancel, and your past transactions.
  • Communications with us - information you include when contacting our customer support team.
  • Device information - information about your device, browser or network connection, your IP address, and other unique identifiers.
  • Usage information - information regarding your interaction with the Services, including how and when you navigate the website.

2. Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you - when you create an account, visit or use the Services, place an order, or communicate with us.
  • Automatically through the Services - from your device via cookies and similar technologies when you use our website (see clause 8).
  • From our service providers - including Shopify, who collect or process your personal information on our behalf to enable the Services
  • From our partners or other third parties - as described in clause 4.

3. How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes, each supported by a lawful basis under UK GDPR:

Purpose

Provide, tailor and improve the Services - processing payments, fulfilling orders, managing your account, arranging shipping, facilitating returns and exchanges, and creating a personalised shopping experience.

Lawful basis

Performance of a contract - Article 6(1)(b) UK GDPR

 

Purpose

Marketing and advertising - sending promotional communications by email, text or post, and showing you relevant online advertisements based on your activity on our store.

Lawful basis

Consent (for direct marketing) / Legitimate interests - Article 6(1)(a) and (f) UK GDPR

 

Purpose

Security and fraud prevention - authenticating your account, detecting and investigating fraudulent or malicious activity, and securing our services.

Lawful basis

Legitimate interests / Legal obligation - Article 6(1)(f) and (c) UK GDPR

 

Purpose

Communicating with you - providing customer support and maintaining our business relationship with you.

Lawful basis

Performance of a contract / Legitimate interests - Article 6(1)(b) and (f) UK GDPR

 

Purpose

Legal compliance - complying with applicable law, responding to legal process, and enforcing our terms or policies.

Lawful basis

Legal obligation - Article 6(1)(c) UK GDPR

 

4. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy:

  • With Shopify and other service providers - vendors who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
  • With business and marketing partners - to provide marketing services and relevant advertising. Our partners will use your information in accordance with their own privacy notices.
  • When you direct or consent - for example, when arranging shipping or using social media login integrations.
  • Within our corporate group - with our affiliates where applicable.
  • In connection with a business transaction - such as a merger, acquisition or bankruptcy.
  • To comply with legal obligations - including responding to court orders, subpoenas and search warrants.
  • To protect rights and safety - to enforce our terms or protect the rights of our users or others.

We will never sell your personal information to any third party.

5. Our Relationship with Shopify

Our store and website are hosted by Shopify Inc. Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside.

Shopify also provides enhanced features that incorporate data from your interactions with our store, alongside other merchants and with Shopify. In these circumstances, Shopify acts as an independent data controller and is responsible for the processing of your personal information for those purposes, including responding to your requests to exercise your rights.

To learn more about how Shopify uses your personal information and any rights you may have, please visit the Shopify Consumer Privacy Policy at www.shopify.com/legal/privacy. You may also exercise rights relating to data processed by Shopify directly via the Shopify Privacy Portal at https://privacy.shopify.com/en.

6. Retention of Your Information

How long we retain your personal information depends on factors such as whether we need the information to maintain your account, to provide the Services, to comply with legal obligations, or to resolve disputes. Specific periods include:

  • Order and transaction records - retained for 7 years to comply with HMRC requirements.
  • Marketing preferences and contact details - retained until you withdraw consent or ask us to stop.
  • General correspondence - retained for up to 3 years.

When personal data is no longer required it will be securely deleted or anonymised.

7. Managing Communication Preferences

We may send you promotional emails. You may opt out of receiving these at any time by using the unsubscribe link in any email we send you, or by contacting us at info@cheshire-pie.co.uk. If you opt out, we may still send you non-promotional emails, such as those about your account or orders.

8. Cookies

Our website uses cookies (small text files placed on your device) to improve your browsing experience and to help us understand how visitors use our site. By using our website with your browser set to accept cookies, you consent to our use of cookies as described in this policy.

Because our website is hosted on Shopify, Shopify sets a number of cookies automatically as part of the platform. These include:

  • _shopify_y and _shopify_s - analytics cookies that track unique visitors and session activity on the store.
  • _shopify_sa_t and _shopify_sa_p - cookies used to track marketing and referral sources.
  • cart — a strictly necessary cookie used to maintain the contents of your shopping basket throughout your visit.
  • secure_customer_sig — a strictly necessary cookie used to verify whether a customer is logged in.

In addition, we may use strictly necessary, analytics and marketing cookies. Full details of Shopify's cookies are available at www.shopify.com/legal/cookies. You may disable cookies in your browser settings at any time, though this may affect website functionality including checkout.

9. Children's Data

The Services are not intended for use by children. We do not knowingly collect any personal information about children under the age of majority. If you are the parent or guardian of a child who has provided us with their personal information, please contact us at info@cheshire-pie.co.uk and we will arrange for it to be deleted. As of the effective date of this Privacy Policy, we do not knowingly sell or share personal information of individuals under 16 years of age.

10. Security and Retention of Your Information

We take reasonable measures to protect your personal information. However, no security measures are perfect or impenetrable, and we cannot guarantee the security of information transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information.

11. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.

  • Right to Access / Know - you may request access to the personal information we hold about you.
  • Right to Delete - you may request that we delete personal information we hold about you.
  • Right to Correct - you may request that we correct inaccurate personal information.
  • Right of Portability - you may request a copy of your personal information in a portable format.
  • Right to Object / Restrict Processing - you may ask us to stop or restrict our processing for certain purposes.
  • Right to Withdraw Consent - where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@cheshire-pie.co.uk or in writing to 8 Bold Street, Sandbach, CW11 1GR. We may verify your identity before acting on your request and will not discriminate against you for exercising your rights.

For rights relating to data processed by Shopify directly, please visit the Shopify Privacy Portal at https://privacy.shopify.com/en.

If you reside in the UK and are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or on 0303 123 1113.

12. Complaints

If you have complaints about how we process your personal information, please contact us using the details in clause 16. You may also have the right to appeal our decision or lodge a complaint with your local data protection authority. For the UK, this is the ICO at www.ico.org.uk.

13. International Transfers

We may transfer, store and process your personal information outside the country you live in. Where we transfer personal information out of the United Kingdom or European Economic Area, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts approved by the ICO for UK transfers, unless the transfer is to a country that has been determined to provide an adequate level of protection.

14. Third-Party Websites and Links

The Services may contain links to websites or other platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites. If you follow links to sites not affiliated or controlled by us, you should review their privacy policies and terms of use. Our inclusion of such links does not imply any endorsement of those sites or their owners.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on this website and update the "Last updated" date. We encourage you to review this policy periodically.

16. Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:

  • Email: info@cheshire-pie.co.uk
  • Post: 8 Bold Street, Sandbach, CW11 1GR
  • Telephone: 01270 768999