PRIVACY NOTICE
Last updated September 30, 2025
Thank you for choosing to be part of our community at Nibble & Peck (“Company,” “we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. If you have any questions about this privacy notice or our practices, please contact us at admin@nibble-and-peck.co.uk.
This privacy notice describes how we use your information if you: visit our website at nibble-and-peck.co.uk, or engage with us in other related ways — including sales, marketing, or events.
In this privacy notice, “Website” means our website nibble-and-peck.co.uk, and “Services” means our Website and other related services, including any sales, marketing, or events.
If you do not agree with any part of this notice, please discontinue use of our Services immediately.
TABLE OF CONTENTS
0. WHO WE ARE
Nibble & Peck is the data controller for personal data processed via our Website and Services.
Contact: Nibble & Peck, 8 Bowmount Park, Newtownards, Down BT23 8SS, UK — admin@nibble-and-peck.co.uk.
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us: We collect personal information you provide when you register for an account (required to checkout), place an order, select delivery/pickup slots, subscribe to marketing, enter competitions, or contact us.
Examples: name, email, phone, billing and delivery addresses, order details, delivery instructions.
Payment data: Payments are processed by Stripe (includes Apple Pay and Google Pay). For bank transfers, we see payer details. See Stripe’s privacy notice here: https://stripe.com/en-gb/privacy.
Marketing preferences: If you opt into email via Sender.net or SMS reminders, we record your consent and preferences.
Automatically collected data: When you visit our Website, we collect device and usage information (e.g., IP, browser, operating system, referral, location by IP). Cookies are used — see our Cookie Policy.
2. OUR LEGAL BASES
Contract: to provide your account, process orders, deliver goods, and provide support.
Legal obligation: to keep records for tax/accounting and comply with law.
Legitimate interests: to secure our site (Wordfence, Blackhole Pro), improve services (analytics), request reviews, and manage our business.
Consent: for marketing (Sender.net emails, SMS), and for non-essential cookies/ads (Google Analytics, Meta Pixel).
3. HOW DO WE USE YOUR INFORMATION?
We use your information to: manage accounts and checkout; fulfil orders and delivery slots (Coderockz); provide customer service; send order updates and review requests; send marketing if you consent; secure our site; analyse performance; run ads; and comply with legal requirements.
We only share data with service providers (see Section 5), when required by law, or in business transfers. We do not sell your data.
5. OUR SERVICE PROVIDERS
WooCommerce, Coderockz Woo Delivery, PPOM, Elementor Pro.
Payments: Stripe (Apple Pay, Google Pay), bank transfer (we see payer details).
Emails: Sender.net (marketing), Gmail & Zoho Mail (transactional), WP SMTP. SMS reminders (with opt-in).
Analytics/Ads: Google Tag Manager, Google Analytics, Meta Pixel / Facebook Ads.
Hosting & security: BigWetFish (hosting), Wordfence, Blackhole Pro.
Accounting & storage: QuickBooks, Google Drive.
Deliveries are local, handled directly by us (no courier data sharing).
We use cookies and pixels. Non-essential tags only run with your consent. See our Cookie Policy.
7. RETENTION
Orders and financial records: 5 years. Customer accounts: no inactivity limit (delete anytime on request). Marketing data: until you unsubscribe. Contact form enquiries: deleted when dealt with.
8. SECURITY
We use TLS encryption, Wordfence, Blackhole Pro, and access controls. No system is 100% secure, but we take appropriate measures.
9. YOUR RIGHTS
You have rights under UK/EU GDPR: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may complain to the ICO (link).
You can update or delete your account in settings or by contacting us. Cookies can be managed via your browser or cookie banner. Marketing: unsubscribe via links, STOP for SMS, or contact us.
10. CHILDREN
We do not advertise to children and do not knowingly collect data from under-16s.
11. INTERNATIONAL TRANSFERS
Some providers process data outside the UK/EEA. We use safeguards like adequacy decisions or Standard Contractual Clauses.
12. DO-NOT-TRACK
We do not currently respond to browser DNT signals, as no standard exists. If one is adopted, we will comply.
13. UPDATES
We update this notice as needed. Changes take effect when posted. If material, we may notify you on the Website or by email.
14. CONTACT US
Email: admin@nibble-and-peck.co.uk
Post: Nibble & Peck, 8 Bowmount Park, Newtownards, Down BT23 8SS, United Kingdom
15. REVIEW/DELETE DATA
You may request access, correction, deletion, restriction, portability, or object to processing by contacting us.
This privacy policy reflects our services and UK GDPR requirements.
