Privacy Policy

1. Who We Are

This site is operated by Paul Wayne Gregory Chocolates Ltd, a company registered in England and Wales under company number 09068409, with its registered office at 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF. We're the data controller for the personal data described in this policy. You can reach us about anything in this policy at info@paulwaynegregory.com.

2. What We Collect

We collect personal data in a few ways:

• —Contact and order details you give us directly — name, email, delivery address, and order or enquiry details, when you get in touch or place an order.
• —Bespoke Box builder content — any logo you upload or name you type in to preview on a box, and the choices you make while building a design.
• —Newsletter sign-up — your email address, if you subscribe.
• —Cookies and similar technologies — see the Cookies section below, and the cookie banner shown on this site, for the categories we use and how to control them.

3. How We Use It

We use your personal data to:

• —Respond to enquiries and process orders, including Bespoke Box orders and any personalisation proofs.
• —Send you order-related updates (confirmation, dispatch, delivery).
• —Send marketing communications, but only if you’ve opted in — you can unsubscribe at any time.
• —Understand how the site is used and improve it, where you’ve consented to analytics cookies.
• —Meet our legal and regulatory obligations, including around food safety and allergen information.

4. Our Legal Basis for Using Your Data

We rely on: performance of a contract (fulfilling an order or enquiry you’ve made), consent (marketing emails and analytics/marketing cookies, which you can withdraw at any time), and legitimate interests (keeping the site secure and understanding how it’s used, balanced against your rights).

5. Cookies

We use strictly necessary cookies to run the site, which are always on because the site can’t function properly without them. Where you opt in via the cookie banner, we also use analytics and marketing cookies to understand how the site is used. You can change your preference at any time by clearing your browser’s local storage for this site and reloading the page, which will bring the cookie banner back.

6. Sharing Your Data

We don’t sell your personal data. We share it only with service providers who help us run the site and fulfil orders — for example, email delivery, hosting, and (for Bespoke Box personalisation) our packaging and foiling suppliers, who receive only what’s needed to produce your order. We require anyone we share data with to protect it properly.

We may also disclose data where required by law.

7. How Long We Keep It

We keep order and enquiry data for as long as needed to fulfil your order, meet legal and accounting obligations, and handle any related questions afterwards. We keep marketing data until you unsubscribe or ask us to delete it.

8. Your Rights

Under UK data protection law, you have the right to:

• —Access the personal data we hold about you.
• —Ask us to correct inaccurate data.
• —Ask us to delete your data, in certain circumstances.
• —Ask us to restrict or object to certain processing.
• —Ask for your data in a portable format.
• —Withdraw consent at any time, where we rely on consent.

9. Complaints

If you have concerns about how we handle your data, contact us first at info@paulwaynegregory.com so we can try to put it right. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ico.org.uk).

10. Keeping Your Data Secure

We use reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

11. Children

This site is intended for adults. We don’t knowingly collect personal data from children.

12. Changes to This Policy

We may update this policy from time to time, for example as we finalise the details flagged above. The “Last Updated” date at the top of this page reflects the most recent version.