LuvMuffin Privacy & Data Policy

Last Updated: April 2026

At LuvMuffin, we care as much about your personal data as we do about the golden crumb on our blueberry muffins. This policy explains what "knead-to-know" information we collect, how we use it, and how we keep it safe.

1. Who We Are

LuvMuffin is a partnership operating in the United Kingdom. Under the UK GDPR, we are the "Data Controller" of the personal information you provide to us.

Partnership Name: LuvMuffin
Contact Email: order@luvmuffin.co.uk
Data Protection Contact: Gayle Johnson
Main Business Address: 7 Winton Rd, Reading, RG2 8HH
ICO Registration Number: ZC211542

2. The Data We Collect

We collect different information depending on whether you are a muffin lover or a business partner.

A. For End Users (Consumers)

Identity Data: Name and title.
Contact Data: Delivery address, email address, and telephone number.
Transaction Data: Details about payments and products you’ve purchased.
Technical Data: IP address, browser type, and location (via cookies).

B. For Resellers (B2B Partners)

Business Identity: Business name, VAT number, and Company Registration Number.
Professional Contact Data: Names of point-of-contact, business email, and office phone numbers.
Financial Data: Bank account details for invoicing and credit reference information.
Trade History: Volume of orders and wholesale pricing tiers.

3. How We Use Your Data

We don’t believe in half-baked excuses for data usage. We only use your information when the law allows us to:

To Perform a Contract: To bake, pack, and deliver your muffins or to manage a wholesale account.
Legitimate Interests: To improve our recipes, website, and customer service (provided your rights aren't overridden).
Legal Obligation: To keep tax records or comply with food safety tracking regulations.
Consent: If you’ve opted-in to our "Muffin Mailer" newsletter.

4. Sharing Your Information

We never sell your data to third parties. However, we do share it with trusted partners to get the job done:

Delivery Partners: (e.g., DPD, Royal Mail) so they know where to drop the treats.
Payment Processors: (e.g., Stripe, PayPal) to securely handle transactions.
IT & Admin: Service providers who host our website and manage our professional emails.
Regulatory Bodies: If required by HMRC or food standard authorities.

5. International Transfers

As a UK business, we prioritize keeping data within the UK or the EEA. If we use a service provider based elsewhere (like a US-based mailing platform), we ensure they have "Adequate" protection levels or Standard Contractual Clauses in place.

6. Data Retention

We don't keep data longer than we need to.

Customer Records: Kept for 6 years following a purchase to satisfy HMRC tax requirements.
Marketing Data: Kept until you unsubscribe (which you can do at any time).
Reseller Contracts: Kept for the duration of the partnership plus 6 years.

7. Your Legal Rights

Under UK law, you have rights that we fully respect:

Access: You can ask for a copy of the data we hold on you.
Correction: Tell us if we’ve got your address or name wrong.
Erasure: Ask us to delete your data (the "Right to be Forgotten").
Object/Restrict: You can ask us to stop processing your data for marketing.

Note: To exercise these rights, just email us at order@luvmuffin.co.uk. We aim to respond within 30 days.

8. Cookies

Our website uses cookies to remember your shopping basket and analyze site traffic. You can manage your cookie preferences through your browser settings, though some parts of the LuvMuffin site may not work perfectly without them.

9. How to Complain

If you’re unhappy with how we handle your data, please talk to us first! If we can’t resolve it, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). ICO Helpline: 0303 123 1113.

LuvMuffin: Baked with love