Legal
Privacy Policy
Last updated: 15 June 2026
SweetCure Vita is committed to protecting your personal data. This policy explains what information we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is SweetCure Vita, a company registered in England and Wales, operating from London, United Kingdom.
For privacy enquiries, contact us at privacy@sweetcurevita.com or via our Contact page.
2. What data we collect
Account and order data — name, email address, delivery address, phone number, and order history when you register or place an order.
Payment data — we do not store card details. Payments are processed securely by Stripe, Inc. We only receive a transaction confirmation and reference.
Usage data — pages visited, products viewed, search terms, and general device/browser information, collected via analytics tools (Google Analytics 4 and Meta Pixel) when you consent.
Communications — emails or messages you send us, including support requests and newsletter subscriptions.
Cookies — see our Cookie Policy for full details.
3. How we use your data
We use your personal data to:
- Process, fulfil, and deliver your orders
- Send order confirmations, dispatch notifications, and receipts
- Manage your account and respond to support queries
- Send marketing emails and promotions (only with your consent)
- Improve our website and understand how customers use it (with analytics consent)
- Comply with legal obligations, including tax and fraud prevention
4. Legal basis for processing
- Contract — processing is necessary to fulfil your order and deliver our services.
- Legitimate interests — fraud prevention, network security, and improving our services in ways that do not override your rights.
- Consent — marketing emails, analytics cookies, and advertising pixels. You can withdraw consent at any time.
- Legal obligation — where required by law (e.g. keeping financial records).
5. Who we share your data with
We share personal data only with trusted third parties needed to operate our business:
- Stripe, Inc. — payment processing (adequacy safeguards apply for international transfers)
- Delivery carriers — your name and address to fulfil shipments
- Email service providers — to send transactional and marketing emails
- Google LLC — analytics (with consent); data may be processed outside the UK under Standard Contractual Clauses
- Meta Platforms, Inc. — advertising (with consent); data may be processed outside the UK under Standard Contractual Clauses
We do not sell your personal data to any third party.
6. How long we keep your data
- Order and transaction records — 7 years (UK tax law requirement)
- Account data — for the life of your account plus 2 years after last activity
- Marketing consent — until you unsubscribe or withdraw consent
- Support communications — 3 years
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data we hold about you
- Erasure — ask us to delete your data (subject to legal retention obligations)
- Portability — receive your data in a machine-readable format
- Restriction — ask us to pause certain processing while a dispute is resolved
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — at any time for consent-based processing (e.g. marketing emails or analytics)
To exercise any right, email privacy@sweetcurevita.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Data security
We use industry-standard security measures including TLS encryption in transit, access controls, and regular security reviews. No method of internet transmission is 100% secure, but we take all reasonable steps to protect your data.
9. International transfers
Some of our third-party processors operate outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses approved by the ICO.
10. Children
Our website and products are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Significant changes will be communicated by email where we hold your address.