We collect only what helps us take an order, answer a message, or keep the website working.
Information we collect
When you order sweets or snacks online, we may collect your name, delivery address, collection details, telephone number, email address, order contents, and payment status. Card details are handled by our payment provider; Varley & Vickers Treats does not keep full card numbers.
We also receive information you send through a contact form or email. Website technical data, such as browser type, device details, approximate location, and pages visited, may be recorded through cookies or server logs.
How we use your information
Your information lets us confirm and prepare orders, arrange local delivery or in-store pickup, respond to questions, and deal with refunds or order problems. We may use your contact details to send service messages about an order you have made.
We do not share customer data with third parties for their own marketing. We disclose information only where a service provider needs it to process an order, where the law requires it, or where it is needed to protect our customers and business.
Data storage and security
We use access controls and SSL encryption on transactions to reduce the risk of unauthorised access. Regular security checks help us review how customer information is stored and handled.
We keep order and accounting records for as long as tax, consumer, and business rules require. Enquiry records are kept only for as long as needed to deal with the request and any follow-up.
Cookies and tracking technologies
Essential cookies help the site remember items in your basket, maintain secure sessions, and support checkout. Optional analytics cookies may help us understand which pages are useful and where the site needs improvement.
You can change your optional cookie choice in the cookie usage panel below. Your browser also lets you block or remove cookies, although some ordering features may then work differently.
Your rights under UK GDPR
You can ask us to access, correct, erase, or restrict the use of your personal data. You may also object to certain processing or ask for your information in a portable format where the law provides that right.
We may need to check your identity before completing a request. We aim to respond within one month. If you are unhappy with our response, you can raise a concern with the Information Commissioner's Office.