This Privacy Policy explains how Gummy Hive (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you visit our website, place an order, contact us, or otherwise interact with our brand.

●      Trading name: Gummy Hive

●      Registered company name: Gummy Hive LTD

●      Company registration number: 17326010

●      Registered/trading address: 71 Upper Shaftesbury Avenue, Southampton, United Kingdom, SO17 3RU

●      Email: info@gummyhive.co.uk

●      Phone: +44 7454 753844

For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Gummy Hive is the data controller responsible for your personal data.

This website is not intended for children, and we do not knowingly collect personal data relating to children under 16.

We may collect, use, store and transfer the following categories of personal data about you:

Category	Examples
Identity Data	Name, title, date of birth (where relevant to age verification)
Contact Data	Billing address, delivery address, email address, telephone number
Financial Data	Payment card details — processed directly by Shopify Payments / Stripe; we do not store full card numbers ourselves
Transaction Data	Details of orders, payments, refunds and products purchased
Technical Data	IP address, browser type and version, device information, operating system
Usage Data	How you use our website — pages viewed, time on page, click patterns
Marketing Data	Your preferences for receiving marketing communications and how you interact with them

 

We may also collect and use aggregated or anonymised data (such as overall visitor statistics) which does not identify you personally.

We collect data about you through:

●      Direct interactions — when you place an order, create an account, sign up to our newsletter, contact us, or enter a promotion.

●      Automated technologies — as you browse our website, we automatically collect Technical and Usage Data using cookies and similar technologies (see Clause 6).

●      Third parties — our payment processor and analytics/advertising partners (Shopify Payments, Stripe, Google Analytics, Meta) may share limited technical or transaction data with us as part of their services.

UK data protection law requires us to have a valid legal basis for each way we use your personal data. We rely on the following:

●      Performance of a contract — to process and deliver your order, manage payments, and provide customer service.

●      Legitimate interests — to operate and improve our website, prevent fraud, and understand how customers use our products, provided this does not override your rights.

●      Legal obligation — to comply with tax, accounting and consumer protection law.

●      Consent — for marketing emails/SMS and non-essential cookies (such as Meta Pixel and Google Analytics), which you can withdraw at any time.

Specific purposes

●      To register you as a customer and manage your account.

●      To process, fulfil and deliver your order, including sharing necessary details with our courier(s).

●      To process payment securely via Shopify Payments/Stripe.

●      To respond to enquiries, complaints and customer service requests.

●      To send marketing communications where you have opted in, and to let you opt out at any time.

●      To analyse website usage (via Google Analytics) and measure advertising performance (via Meta Pixel) to improve our website and marketing.

●      To detect and prevent fraud and misuse of our website.

●      To comply with legal and regulatory obligations.

Where you have opted in (for example, by subscribing to our newsletter or checking a marketing box at checkout), we may send you emails about new products, offers and Gummy Hive news.

You can opt out of marketing at any time by clicking “unsubscribe” in any marketing email, or by contacting us at info@gummyhive.co.uk. Opting out of marketing does not affect service-related messages such as order confirmations or delivery updates, which we send as part of fulfilling your order.

Our website, hosted on Shopify, uses cookies and similar technologies to make the site work, understand how it's used, and support our marketing. A cookie is a small file stored on your device.

Cookie Type	Purpose
Strictly necessary	Required for the website and checkout to function (e.g. shopping basket, secure checkout). These cannot be switched off.
Analytics — Google Analytics	Helps us understand how visitors use our website (pages viewed, time spent, navigation paths) so we can improve it.
Advertising — Meta Pixel	Measures the effectiveness of our Facebook/Instagram advertising and helps us show relevant ads to people who may be interested in Gummy Hive.
Functionality	Remembers your preferences (such as currency or region) between visits.

 

You can control or delete cookies through your browser settings. Blocking all cookies, including strictly necessary ones, may prevent parts of our website (such as checkout) from working properly. Where required by law, we will ask for your consent to non-essential cookies (Analytics and Advertising) via a cookie banner when you first visit our site.

We do not sell your personal data. We share it only with trusted parties who help us run our business, or where required by law:

Who	Why We Share Data With Them
Shopify Inc.	Provides the e-commerce platform, checkout and website hosting for our store.
Shopify Payments / Stripe	Processes payment card transactions securely. We do not store your full card details ourselves.
Delivery couriers	Receive your name, delivery address and contact details to deliver your order.
Google (Google Analytics)	Receives Technical and Usage Data to help us understand website performance.
Meta Platforms (Meta Pixel)	Receives limited technical/browsing data to help us measure and improve Facebook/Instagram advertising.
Professional advisers & authorities	Lawyers, auditors, insurers or regulators, where necessary to comply with the law or protect our legal rights.

 

If we sell, transfer or merge part of our business, your data may be transferred to the new owner, who will use it in accordance with this Privacy Policy (or one materially similar to it).

Some of our service providers, including Shopify, Google and Meta, may process data outside the UK, including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or reliance on an adequacy decision, so that your data continues to receive a level of protection consistent with UK data protection law.

We keep your personal data only for as long as necessary for the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements (for example, UK tax law generally requires order and payment records to be kept for at least 6 years).

Where you have created an account but not made a purchase, or unsubscribed from marketing, we will delete or anonymise your data within a reasonable period unless we are required to keep it for a legal reason.

Under UK data protection law, you have the right to:

●      Access — request a copy of the personal data we hold about you.

●      Rectification — ask us to correct inaccurate or incomplete data.

●      Erasure — ask us to delete your data in certain circumstances.

●      Restriction — ask us to limit how we use your data.

●      Object — object to our use of your data for direct marketing or legitimate interests.

●      Portability — request your data in a structured, machine-readable format.

●      Withdraw consent — where we rely on consent, withdraw it at any time without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at info@gummyhive.co.uk. We may need to verify your identity before responding, and we will respond within one month as required by law.

We use appropriate technical and organisational measures to protect your personal data, including secure servers and encrypted payment processing through Shopify Payments/Stripe (PCI-DSS compliant). While we take security seriously, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security of data transmitted to our website.

If you have concerns about how we handle your personal data, please contact us first at info@gummyhive.co.uk so we can try to put things right.

You also have the right to lodge a complaint with the UK's data protection regulator:

●      Information Commissioner's Office (ICO)

●      Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

●      Telephone: 0303 123 1113

●      Website: www.ico.org.uk

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. Any changes will be posted on this page with an updated “Last updated” date.

●      Email: info@gummyhive.co.uk

●      Phone: +44 7454 753844

●      Post: 71 Upper Shaftesbury Avenue, Southampton, United Kingdom, SO17 3RU