Last Updated: July 2026

At Cocoa Nofel we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you visit our website www.cocoanofel.com, purchase our artisan hot chocolate, or contact us regarding custom products and wedding favours.

​

Cocoa Nofel is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. The Information We Collect About You

We may collect, use, and store different types of personal data depending on how you interact with us:

• Identity & Contact Data: Your name, billing address, delivery address, email address, and telephone number.

• Transaction Data: Details about products you have purchased, order history, and payments made to us. (Note: We do not store or process your financial card details directly; all payments are processed securely via encrypted third-party payment providers).

• Bespoke Media & Customisation Data: Personal photo uploads, names, dates, or custom messages provided to us for personalised hot chocolate sachets or wedding favours.

• Technical & Analytics Data: IP address, browser type, device information, and website usage statistics collected automatically via cookies when you browse our site.

• Marketing & Communication Data: Your preferences in receiving marketing emails or updates from us (if you explicitly opt-in).

• ​

2. How We Collect Your Personal Data

We collect personal data from you through:

• Direct Interactions: When you place an order, create an account, upload photos for custom sachets, fill out a contact form, or email us.

• Automated Technologies: As you interact with our website, automated cookies and analytics technologies collect technical data about your browsing equipment and actions.

• ​

3. How We Use Your Personal Data (Legal Basis)

Under UK GDPR, we must have a lawful basis to process your personal data. We use your data for the following reasons:

• To Fulfil Orders & Contracts: Processing your contact details, address, and payment confirmation to mix, pack, personalise, and ship your hot chocolate.

• Custom Printing Services: Using your provided photos and personalised text solely to print your custom sachet designs.

• Customer Support: Responding to your enquiries, order status updates, or after-sales assistance.

• Legitimate Interests: Keeping business records, preventing fraud, and improving our website experience.

• Consent: Sending you marketing newsletters or setting non-essential cookies (only when you have given explicit consent).

• ​

4. How We Share Your Personal Data

We never sell, rent, or trade your personal data to third parties. We only share necessary personal information with trusted service providers who help us operate our business:

• Website & E-Commerce Platform: Hosted via Wix, who securely process order details.

• Payment Processors: Stripe or PayPal to process payments securely.

• Postal & Courier Services: Royal Mail or courier partners to deliver your packages (names and shipping addresses only).

• Legal Obligations: If required by law, regulation, or law enforcement (e.g., Trading Standards or HMRC tax reporting).

• ​

5. Custom Photos & Wedding Favours

For customers ordering personalised hot chocolate sachets:

• Any photographs, images, or bespoke text submitted to us for custom printing will be used strictly for manufacturing your order.

• Custom images are securely stored during production and deleted from our active printing servers within 30 days after order fulfilment, unless retained with your express permission for showcase or portfolio purposes.

• ​

6. Data Retention

We will only keep your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, or regulatory requirements. (For instance, UK tax law requires us to retain basic order and invoice records for up to 6 years).

​

7. Cookies

Our website uses cookies to distinguish you from other users, provide core e-commerce functionality (like remembering items in your shopping cart), and collect analytics data. You can manage or disable non-essential cookies at any time using our website's Cookie Consent Banner.

​

8. Your Legal Rights Under UK GDPR

Under UK data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request that we correct incomplete or inaccurate data.

• Right to Erasure ("Right to be Forgotten"): Request that we delete your personal data (subject to legal record-keeping exemptions).

• Right to Restrict or Object: Object to us processing your data for direct marketing or specific legitimate interests.

• Right to Withdraw Consent: Withdraw marketing or cookie consent at any time.

To exercise any of these rights, please contact us at contact@cocoanofel.com.

​

9. How to Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please reach out to us:

• Email: contact@cocoanofel.com

• Postal Address: Cocoa Nofel, 10 Maes Yr Eos, Bridgend, South Wales, UK

• Supervisory Authority: You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns first!