Privacy Policy

Information we collect

When you place an order we collect:

• Your name, email address and phone number
• Your shipping and billing address
• The contents of your order and any gift note you write

We do not collect or store your card number. Payments are handled entirely by Stripe, and your card details go to Stripe rather than to us. Stripe returns only a confirmation and the last four digits.

When you browse the site we also receive standard technical information such as your IP address, browser type, referring page and the pages you visit. This is collected automatically by our hosting provider.

How we use it

• To process, pack and deliver your order
• To send order confirmations, tracking and delivery updates
• To answer questions and handle returns or replacements
• To detect and prevent fraudulent transactions
• To meet our tax, customs and food import record-keeping duties
• To send marketing email, but only if you have asked us to. Every marketing message has an unsubscribe link.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share only what is needed with:

• Stripe, to take payment and prevent fraud
• Shipping carriers, to deliver your order
• Our hosting and email providers, to run the site and send receipts
• Government agencies or law enforcement, where the law requires it

Cookies

We use a small number of cookies and similar storage. Some are necessary for the site to work at all, such as remembering the contents of your cart. Others help us understand which pages people find useful. You can block cookies in your browser settings, though the cart will stop working if you do.

How long we keep it

Order records are kept for seven years to meet tax and food import record-keeping requirements. Marketing contact details are kept until you unsubscribe. Technical logs are kept for a short period and then deleted.

Your rights

Depending on where you live, you may have the right to see the personal information we hold about you, correct it, delete it, or ask us to stop using it for marketing. Residents of California, Colorado, Connecticut, Utah and Virginia have specific rights under state privacy law, including the right not to be discriminated against for exercising them. Canadian residents have equivalent rights under PIPEDA.

To make a request, email hello@treatsfrom.com. We will respond within 45 days. We may need to verify your identity first, usually by confirming details of a recent order.

Children

This site is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

Security

The site runs over HTTPS and payment data is handled by a PCI compliant provider. No system is perfectly secure, but we take reasonable steps to protect what we hold.

Changes and contact

If we change this policy we will update the date at the top of the page. Questions go to hello@treatsfrom.com, or see our terms of service.