Privacy Policy
The short version
We collect what we need to take your order and send it, we only share it with the companies that help us do that, we never sell it, and you can see, change or delete it by emailing us.
Who we are
IPOC Limited, trading as Candy4U, company number 15977097, Unit 8 Wapping Park, Gresley Road, South West Industrial Estate, Peterlee, SR8 2FD, is the data controller for candy4u.co.uk. Email hello@candy4u.co.uk for anything about your data.
What we collect
- Your name, email, delivery and billing address and phone number when you order, subscribe, sign up or contact us
- Your order history, stash and subscription preferences, and any dietary filters you set
- Payment details, which go straight to our payment providers and are never stored by us
- Gift messages and recipient details when you send a gift
- How you use the site, which pages and products you look at, your device and browser, and your IP address, through cookies and similar tools
- Anything you send us in messages, reviews or on social media
What we use it for
- To take, pack and deliver your order and run your subscription. Legal basis: contract
- To send you emails and texts about orders, deliveries and your account. Legal basis: contract
- To send you marketing, new sweets, offers, Swipe to Stash, if you've signed up or bought from us and not opted out. Legal basis: consent, or legitimate interest for existing customers under the soft opt in. Unsubscribe at any time from any email
- To show you relevant ads on other platforms and measure them. Legal basis: consent through the cookie banner
- To understand how the site is used and improve it. Legal basis: legitimate interest, or consent for analytics cookies
- To prevent fraud and keep the site secure. Legal basis: legitimate interest
- To meet legal obligations, including food safety records and tax
We never sell your data.
Who we share it with
Only the companies we need to run the shop, and only what they need:
- Shopify, which runs the website and stores orders and accounts
- Recharge, which runs subscriptions
- Payment providers, Shopify Payments, PayPal and Clearpay
- Delivery partners, Royal Mail and our couriers, who get your name, address and phone number
- Klaviyo, which sends our emails and texts
- Our reviews provider, when you leave a review
- Analytics and advertising services, Google, Meta and TikTok, through cookies you've agreed to
- Professional advisers and authorities where the law requires
Some of these are outside the UK. Where they are, the transfer is covered by UK adequacy decisions or standard contractual clauses.
How long we keep it
- Order and account records, 6 years after your last order, for tax and legal reasons
- Marketing data, until you unsubscribe or 2 years after you last engaged with us
- Messages and enquiries, 12 months after we've dealt with them
- Cookies, see the Cookie Policy
Your rights
You can ask us for a copy of your data, ask us to correct it, delete it, stop using it for marketing, restrict how we use it, or send it to you in a portable format. Email hello@candy4u.co.uk and we'll respond within one month. You can also delete your account from your account page.
If you're not happy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk. We'd rather you told us first.
Children
The site is for adults. We don't knowingly collect data from anyone under 16. If you think we have, tell us and we'll delete it.
Changes
We'll update this page when anything changes and put the date below. Last updated: 22 September 2026
