Privacy Notice

Last updated: 3/11/2026

We love serving our customers, and we want you to know exactly what we do with your personal data. This Privacy Notice explains what information we collect, why we collect it, and how we keep it safe and secure.

We’ll update this notice from time to time, so please check back to stay informed.

Who are we?

We are Cream Cornwall. Our registered address is 51 Church Street, Falmouth, Cornwall, TR11 3DS. Our company registration number is 09936453 and our ICO registration number is ZA755036.

We are the data controller for the personal data described in this notice, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You can contact us on 01326 450840 or by emailing orders@creamcornwall.com.

What personal data do we collect, and why?

When you visit our website

We use cookies on our website. Some are necessary to make the website work properly, and others are only used with your consent. You can find out more, and change your preferences at any time, in our cookie policy.

Our website runs on Shopify, which stores your data securely. It can only be accessed by Cream Cornwall staff and by the organisations we work with, where strictly necessary.

When you buy from our website

We’ll use your name, billing and delivery address, email address, phone number and payment details so we can process your order, deliver it, and handle any returns or queries. We do this because it’s necessary to fulfil our contract with you.

If you choose to create an account, we’ll also keep a record of your order history so you can view it when you log in.

When you order from outside the UK

International orders are processed by our partner Global-e, which acts as the merchant of record for these orders. This means Global-e handles your payment, currency conversion, duties and taxes, and international delivery. Your order details are shared with Global-e for this purpose, and Global-e’s own privacy policy also applies, which you’ll see at checkout.

When you buy from one of our shops

We’ll process your payment details securely through our payment providers so we can complete your purchase.

CCTV in our shops and warehouse

We use CCTV at our premises for security and to help prevent crime. Footage is stored securely, only accessed when needed, and automatically deleted after 30 days unless it’s needed to investigate an incident.

When you join our mailing list

We’ll collect your name and email address so we can send you news about new products, special offers, events and workshops.

We’ll only add you to our mailing list if you’ve given us your consent, for example by ticking the box at checkout or signing up on our website. You can unsubscribe at any time using the link in any of our emails.

When you contact us

If you get in touch by email, phone, social media or through our website, we’ll use your details to respond to your enquiry. We keep this correspondence for as long as needed to deal with your query, and then for a further 12 months.

What communications will you receive from us?

About your order

If you’ve placed an order, we may contact you by email, text or phone to update you on its progress, let you know about any problems, or confirm your delivery.

Marketing

If you’ve subscribed to our mailing list, we’ll send you emails about new products, offers and events. We tailor our emails to your interests and measure how well they perform (such as whether they’re opened or clicked) so we can improve what we send.

If you unsubscribe, we’ll add your email address to a suppression list. This simply makes sure we don’t email you again by mistake.

We also regularly review our mailing list. If you haven’t opened our emails for a long time, or they keep bouncing back, we’ll assume you no longer want to hear from us and move you to our suppression list. You’re always welcome to sign up again.

Social media and online advertising

We’re on Facebook, Instagram, Pinterest, LinkedIn and X (formerly Twitter). If you follow or interact with us, we’ll see your name and any details you choose to share publicly.

We sometimes run paid adverts on these platforms and on Google. We’ll only use your personal data to create custom advertising audiences if you’ve given us your consent, and you can manage advertising cookies through our cookie settings.

Our product pages include share buttons for social media. These are switched off by default and only activate when you click them. When you do, your data (including your IP address) is sent to that platform and may be used to show you relevant adverts.

How long do we keep your data?

We keep records of purchases for 7 years to meet our legal and tax obligations. Mailing list data is kept until you unsubscribe. Enquiries are kept for 12 months after your query has been resolved. CCTV footage is deleted after 30 days unless needed to investigate an incident. Any paper records are securely shredded when no longer needed.

Who do we share your data with?

We’re very careful about who we share your data with, and we make sure the organisations we work with take its protection as seriously as we do. We will never sell your data or share it with third parties for their own marketing without your express consent.

We share data with: couriers (such as Royal Mail, DPD and FedEx), our website platform (Shopify), our shipping and order management software, our international checkout partner (Global-e), our till (EPOS) system, our email marketing platform, IT consultants, marketing consultants, our accountant and accounting software (Xero), and our solicitor where needed. We also use [Dropbox, Trello and Google Workspace] to run the business day to day.

Payments

Card payments are handled by Shopify Payments, Stripe, PayPal and Dojo. We follow PCI-DSS card security standards, and your payment information is encrypted to keep it secure. We never store your full card details.

If you choose to pay using Shop Pay, Apple Pay, Google Pay, Klarna or Clearpay, your details will be shared with that provider so your payment can be arranged, and their own terms and privacy policy will apply.

If our business changes

If Cream Cornwall sells or transfers some or all of its business, your personal data may be transferred to the new owner, who will be required to protect it in the same way.

Do we transfer your data outside the UK?

Some of the services we use (such as Shopify, Google, Dropbox and Trello) store data outside the UK, including in the USA and the EU. Where this happens, we make sure appropriate safeguards are in place, such as the UK-US Data Bridge or UK-approved contract terms, so your data stays protected to UK standards.

What are your rights?

You have the right to: be informed about how we use your personal data; access a copy of your personal data; have inaccurate data corrected; have your data deleted in certain circumstances; restrict how we use your data; object to us using your data, including for marketing (you can unsubscribe at any time); receive your data in a format you can pass to another organisation (data portability); and know whether any decisions are made about you by automated means. (We don’t make any automated decisions about you.)

Where we rely on your consent, you can withdraw it at any time.

How to make a request or a complaint

To exercise any of your rights, or if you have a question or concern about how we’ve handled your personal data, please contact us at orders@creamcornwall.com or call 01326 450840.

If you’re unhappy with how we’ve used your data, you have the right to complain to us directly, and we’ll acknowledge your complaint within 30 days and do our best to put things right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Legislation relating to this notice

UK General Data Protection Regulation (UK GDPR); Data Protection Act 2018; Privacy and Electronic Communications Regulations 2003 (PECR); Data (Use and Access) Act 2025.

We will update this privacy notice from time to time, so please check back to see what has changed.