Privacy Policy

Last Updated On 02 March 2026
Effective Date 02 March 2026

1. Introduction

This Privacy Policy explains how Chocolate Limited (‘we’, ‘us’, or ‘our’) collects, uses, and protects your personal information when you visit our website at https://chocolate-ltd.com (the ‘Service’). It applies to visitors based in the United Kingdom and the European Union, and reflects our obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

By using the Service, you acknowledge that you have read and understood this policy. If you do not agree, please do not use the Service.

2. Who We Are

Chocolate Limited (company number 03738789) is the data controller responsible for your personal information. If you have any questions about how we handle your data, please contact us at [email protected].

3. What Information We Collect

We collect the following categories of personal information:

Name — provided by you when you submit a contact or enquiry form
Email address — provided by you when you submit a contact or enquiry form
IP address and device information — collected automatically when you access the Service
Cookies and browsing behaviour — collected automatically via analytics tools (see Section 7)

4. How and Why We Use Your Information

We use your personal information only for the following purposes, and only where we have a lawful basis to do so under UK/EU GDPR:

Responding to your enquiries

When you contact us via our enquiry form, we use your name and email address to respond to your message. The lawful basis for this processing is our legitimate interest in responding to communications directed to us (Article 6(1)(f) UK GDPR).

Website analytics and improvement

We use anonymised and aggregated data about how visitors use our website to understand traffic patterns and improve the Service. The lawful basis for this processing is our legitimate interest in maintaining and improving our website (Article 6(1)(f) UK GDPR). Where analytics cookies are used, we rely on your consent (Article 6(1)(a) UK GDPR), which you can withdraw at any time (see Section 7).

5. Third Parties We Share Data With

We do not sell your personal information. We share data with the following third party solely to support the purposes described above:

Google Analytics (or similar analytics provider) — we use this service to analyse website usage. Data may be processed in the United States. Google LLC participates in the EU-US Data Privacy Framework and, for UK data transfers, we rely on the UK Extension to that framework. You can opt out of Google Analytics tracking at any time via our cookie consent tool or by installing the Google Analytics Opt-out Browser Add-on.

We require all third parties to process your data securely and only for specified purposes.

6. International Data Transfers

Our analytics provider may transfer and process your data outside the UK and EEA. Where this occurs, we ensure appropriate safeguards are in place, including reliance on adequacy decisions or standard contractual clauses approved by the UK Information Commissioner’s Office (ICO) or the European Commission, as applicable.

7. Cookies

We use cookies and similar tracking technologies on our website. Cookies are small text files stored on your device that help us understand how the site is used.

Types of cookies we use:

Essential cookies — necessary for the website to function and cannot be switched off
Analytics cookies — help us understand how visitors interact with our site (e.g. Google Analytics)

When you first visit the Service, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies. You can update your preferences at any time. For full details of the cookies we use, please refer to our Cookie Policy, which is available on our website.

8. How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

Enquiry form data (name and email): retained for up to 2 years from the date of your last contact with us, after which it is securely deleted
Analytics data: retained in accordance with the default retention periods set by our analytics provider (typically 26 months), after which it is automatically deleted or anonymised
IP address and device data: retained for up to 90 days for security and operational purposes

We may retain data for longer periods where required by law or for the establishment, exercise, or defence of legal claims.

9. Your Rights

Depending on where you are based, you have rights under UK GDPR and/or EU GDPR in relation to your personal data. These include the right to:

Access a copy of your personal data
Correct inaccurate or incomplete data
Request erasure of your data (‘right to be forgotten’), subject to certain conditions
Restrict or object to the processing of your data
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at [email protected]. We will respond within one month in accordance with applicable law.

If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk. If you are based in the EU, you may lodge a complaint with your local data protection authority.

10. Children

Our Service is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at [email protected] and we will take steps to delete it promptly.

11. Security

We take the security of your personal information seriously and implement reasonable technical and organisational measures to protect it against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. You provide information to us at your own risk.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the ‘Last Updated’ date at the top of this page and, where changes are material, we will notify you by a prominent notice on the Service. We encourage you to review this page periodically. Your continued use of the Service following notification of changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Chocolate Limited

Registered office: Unit D, South Cambridge Business Park, Babraham Road, Sawston, Cambridge CB22 3JH, United Kingdom

Company number: 03738789

Operating address: Soho Works Shoreditch, Unit 4.01, The Tea Building, 56 Shoreditch High Street, London E1 6JJ

Email: [email protected]

We aim to respond to all enquiries within 5 working days.