Privacy policy

Privacy Policy

Last updated: 20.10.26

Who We Are

This website is operated by Matt Cooper Bites Ltd, a company registered in the United Kingdom.

Registered address:
71–75 Shelton Street
Covent Garden
London
United Kingdom
WC2H 9JQ

Our website address is: https://mattcooperbites.com

We operate an ecommerce store using Shopify, which enables us to sell our products online.

Personal Data We Collect

When you visit our website, create an account, place an order, sign up for marketing, enter a promotion, or otherwise interact with us, we may collect the following types of personal data.

Information You Provide to Us

• Name
• Billing and shipping address
• Email address
• Phone number
• Account login details (if you create an account)
• Order and transaction details
• Marketing preferences (email and SMS)
• Customer support communications
• Promotion and prize claim details, such as claim codes, photos of scratch cards and prize choices

Information Collected Automatically

• IP address
• Browser type and version
• Device information
• Time zone
• Cookies and similar tracking technologies
• Information about how you interact with our website

Video Recording of Order Packing

We video record orders while they are being packed. Recordings show the products and items placed in your parcel and the order number, and may show your name and delivery address on the parcel label. We use these recordings to check that orders are packed correctly, to handle queries about missing, incorrect or damaged items (including promotional items such as Golden Ticket scratch cards), and to prevent fraud. Recordings are kept for 60 days and then deleted, unless we need to keep a recording for longer to deal with an open query, claim or dispute.

How We Use Your Personal Data

We use your personal data to:

• Process, fulfill, and deliver orders
• Manage payments, refunds, and returns
• Create and manage customer accounts
• Communicate with you regarding your orders or account
• Send marketing emails and SMS messages where you have consented
• Provide customer support
• Run promotions and competitions, check prize claims and send prizes
• Check order packing and handle queries about missing, incorrect or damaged items
• Detect, prevent, and investigate fraud or security issues
• Improve and optimize our website, products, and services
• Comply with legal, tax, and regulatory obligations

Legal Basis for Processing (UK & EU GDPR)

We process personal data under the following lawful bases:

• Contractual necessity – to fulfill orders and manage customer accounts, and to run promotions you take part in and deliver prizes
• Legal obligation – to comply with tax, accounting, and regulatory requirements
• Legitimate interests – to operate, secure, and improve our business and website, including recording order packing to check orders and prevent fraud
• Consent – for email marketing, SMS marketing, and non-essential cookies, including advertising cookies and tracking

You may withdraw your consent at any time by using the unsubscribe links in our communications or by contacting us directly.

Shopify

Our store is hosted on Shopify. Shopify provides the ecommerce platform that allows us to sell our products and services to you.

Your personal data is stored through Shopify’s data storage, databases, and general Shopify applications. Shopify stores data on secure servers behind a firewall.

You can read Shopify’s privacy policy here:
https://www.shopify.com/legal/privacy

Payments

Payments are processed securely through Shopify and its approved payment providers, such as Stripe and PayPal, depending on your chosen payment method.

We do not store or have access to your full payment card details.

Shipping

We share necessary personal data (such as your name, address, and contact details) with our shipping providers, Royal Mail and Evri, for the purpose of delivering your orders.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to:

• Enable essential website functionality
• Remember your preferences
• Manage customer accounts and shopping carts
• Analyze website performance and usage
• Support advertising and marketing activities where permitted

Cookies may be set by us or by trusted third parties, including Google, Meta, TikTok, Snapchat, LinkedIn, and Pinterest.

Where required by law, we display a cookie consent banner allowing you to accept or reject non-essential cookies. You can also manage cookies through your browser settings.

Advertising, Analytics & Marketing

We use advertising, analytics, and measurement tools provided by third-party platforms to understand how visitors use our website and to promote our products.

We advertise on platforms including Google (including Google Search, Shopping and YouTube), Meta (Facebook and Instagram) and TikTok. We use their tracking tools, such as the Google tag, the Meta Pixel and the TikTok Pixel, and their server-side tools that send the same information directly from our store.

These tools may collect information such as pages viewed, products interacted with, purchases made, or actions taken on our site. This information may be used to:

• Measure website performance
• Understand customer behaviour
• Deliver relevant advertising content
• Measure and improve marketing campaigns

To measure which adverts lead to purchases, we may share your email address and phone number with these platforms in a hashed (scrambled) form, along with order details such as order value. The platforms use this to match the purchase to an advert you have seen. They cannot read your hashed details, and we only share them where you have accepted advertising cookies or where the law otherwise allows.

Google, Meta and TikTok each act as an independent controller of some of the data they collect. You can read how they use it at https://policies.google.com/privacy, https://www.facebook.com/privacy/policy and https://www.tiktok.com/legal/privacy-policy-eea. You can change your ad preferences in your account settings on each platform.

We may contact you by email or SMS for marketing purposes where you have provided consent. You can unsubscribe at any time by following the instructions included in each message.

Embedded Content

Our website may include embedded content (such as videos, images, or social media posts). Embedded content from other websites behaves in the same way as if you visited those websites directly.

These third-party websites may collect data about you, use cookies, and monitor your interaction with embedded content.

Promotions and Competitions

When you take part in a promotion, such as the Golden Ticket Instant Win, we use your order and contact details to run the promotion, check claims and send prizes. Where a promotion’s terms say so, we may publish or make available the first name and county of winners of major prizes, and we may share details with the Advertising Standards Authority if required. Winners can object to their details being published. The terms of each promotion explain how it works.

Data Sharing

We do not sell your personal data.

We may share personal data with trusted third parties where necessary to operate our business, including:

• Shopify and its service providers
• Payment processors
• Shipping and fulfillment providers
• Email and SMS marketing platforms
• Analytics and advertising platforms, including Google, Meta and TikTok
• Legal or regulatory authorities where required by law

All third parties are required to handle personal data securely and in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to:

• Fulfill orders and provide services
• Maintain customer accounts
• Meet legal, tax, and accounting obligations
• Resolve disputes and enforce agreements

Order packing videos are kept for 60 days, unless needed for longer to deal with an open query, claim or dispute.

When personal data is no longer required, it is securely deleted or anonymized.

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Restrict or object to certain processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority

To exercise your rights, please contact us using the details below.

US Privacy Rights

If you are a resident of the United States, you may have additional rights under applicable state privacy laws, including the right to request access to, deletion of, or information about the use of your personal data.

We do not sell personal information or share it for cross-context behavioural advertising without appropriate consent where required by law.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom or European Union, including the United States and Canada. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.

Security

We implement reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

Contact Information

If you have any questions about this Privacy Policy or how we handle personal data, please contact us:

Business Name: Matt Cooper Bites Ltd
Registered Address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: info@mattcooperbites.com
Website: https://mattcooperbites.com

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or how we operate our business. Any updates will be posted on this page with a revised “Last updated” date.