Privacy policy

DING DONG PRIVACY & COOKIES POLICY

(We Protect Your Data Like We Protect Our Doughnuts)

 

Last Updated: 20/02/2026

At Ding Dong, we take privacy seriously.
Your data is not for sharing, selling, or sneaky business.
This policy explains how we collect, use and protect your personal data when you:

  • Visit our website
  • Place an order
  • Subscribe to our boxes
  • Arrange corporate gifting
  • Choose Click & Collect
  • Sign up for emails

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy & Electronic Communications Regulations (PECR).

1. WHO WE ARE

Ding Dong is a UK-based premium bakery brand.

For the purposes of UK data protection law, Ding Dong acts as the Data Controller of your personal data.

For any privacy questions, contact: hello@dingdongdough.com

2. WHAT PERSONAL DATA WE COLLECT

When you interact with us, we may collect:

Identity & Contact Data

  • Full name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address
  • Company name (for corporate orders)

Transaction Data

  • Order history
  • Subscription details
  • Collection location (e.g. partner stores such as Hermanos Coffee)
  • Payment confirmations

Financial Data

Payments are processed securely via third-party providers.

We do not store full card details.


Technical Data

  • IP address
  • Browser type
  • Device information
  • Website usage data

Marketing Preferences

  • Email opt-ins
  • Communication preferences

No unnecessary data. No nonsense.

3. HOW WE USE YOUR DATA

We use your data to:

  • Process and deliver your orders
  • Manage subscriptions
  • Arrange courier delivery via DPD
  • Coordinate Click & Collect
  • Provide customer support
  • Prevent fraud
  • Improve our website
  • Send marketing (if you’ve opted in)

We do not sell your data. Ever.

4. OUR LEGAL BASIS

Under UK GDPR, we process your data under:

Contractual Necessity

To fulfil your orders and subscriptions.

Legal Obligation

For tax, accounting and regulatory compliance.

Legitimate Interest

To improve services, prevent fraud and manage business operations.

Consent

For marketing and non-essential cookies.

You can withdraw consent at any time.

5. SHARING YOUR DATA

We only share data where necessary with:

  • Courier providers (e.g. DPD)
  • Payment processors
  • Website hosting providers
  • Professional advisers
  • Partner collection stores (for collection orders only)

All third parties are required to handle data securely.

6. HOW LONG WE KEEP YOUR DATA

We only retain data for as long as necessary, including:

  • Order records (typically 6 years for tax compliance)
  • Marketing preferences (until withdrawn)
  • Account data (until deletion requested)

When no longer needed, data is securely deleted or anonymised.

7. YOUR RIGHTS

Under UK GDPR, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent
  • Complain to the Information Commissioner’s Office (ICO)

ICO Website: https://ico.org.uk

To exercise your rights, email: Hello@dingdongdough.com

8. COOKIES (The Digital Kind)

Yes, we make edible cookies.

But we also use website cookies.

Cookies are small files placed on your device to improve your experience.

Types of Cookies We Use

Strictly Necessary Cookies

These keep the website working properly:

  • Shopping basket
  • Secure checkout
  • Fraud prevention

These do not require consent.

Performance & Analytics Cookies

These help us understand:

  • Which pages people visit
  • How long they stay
  • How we can improve

We use tools such as analytics providers.

These require your consent.

Functionality Cookies

These remember preferences such as:

  • Delivery postcode
  • Collection selection
  • Login details

Marketing Cookies

  • Show relevant ads
  • Track marketing effectiveness
  • Support social media integrations

We only use these if you say yes.

9. COOKIE CONSENT

When you first visit our site, you can:

  • Accept all cookies
  • Reject non-essential cookies
  • Manage your preferences

You can change settings anytime.

Disabling cookies may affect checkout or subscription features.

10. DATA SECURITY

We use:

  • SSL encryption
  • Secure payment gateways
  • Restricted internal access
  • Regular system monitoring

No system is 100% impenetrable — but we take protection seriously.

11. INTERNATIONAL DATA TRANSFERS

If any provider processes data outside the UK, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions
  • Standard contractual clauses

12. CHILDREN’S DATA

Our website is not intended for individuals under 18.

We do not knowingly collect children’s data.

13. AUTOMATED DECISION-MAKING

We do not use automated decision-making that produces legal effects.

14. CHANGES TO THIS POLICY

We may update this policy from time to time.

The latest version will always appear on our website.