Privacy Policy (GDPR)

1. Introduction

IPOC Limited is committed to protecting your privacy. This policy explains how we collect, use, and store personal data.

By using our website or placing an order, you agree to this Privacy Policy.

2. What Data We Collect

We may collect:

• Name, address, contact number, email (for orders or enquiries)
  
  

• Payment details (processed securely via Shopify/ payment gateway)
  
  

• IP address, browsing behaviour (via cookies)
  
  

3. Use of Data

We use your data to:

• Process and deliver your orders
  
  

• Communicate with you regarding orders or promotions (if opted in)
  
  

• Improve our site and services
  
  

We will never sell your data.

4. Legal Basis

Under GDPR, we process your data under the lawful bases of:

• Contract (to fulfil your order)
  
  

• Consent (marketing emails)
  
  

• Legitimate interest (fraud prevention, analytics)
  
  

5. Data Retention

We retain your data only as long as necessary for legal and operational purposes.

6. Sharing with Third Parties

We may share data with:

• Shopify (our e-commerce platform)
  
  

• Delivery couriers
  
  

• Payment processors (e.g., PayPal, Stripe)
  
  

• Analytics services like Google Analytics
  
  

These providers are GDPR compliant.

7. Your Rights

You have the right to:

• Access or correct your data
  
  

• Request deletion of your data
  
  

• Withdraw marketing consent at any time
  
  

To exercise any rights, email us at info@candy4u.co.uk.

8. Changes to this policy

We may update this policy occasionally. Continued use constitutes acceptance of any updates.