Information

Privacy policy

Last updated: 24 October 2026

This policy explains what personal information Lola’s Creamy collects when you use this website or place an order, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who is responsible for your data

Lola’s Creamy, London E8 2BH, is the controller of your personal data. Contact: info@lolascreamy.com.

To confirm: legal name and full address; ICO registration number if applicable

What we collect

When you order: your name, email address, phone number, delivery address and any delivery notes; what you ordered, your delivery day and the amount paid.
Payment: handled by Stripe. We receive confirmation of payment and a payment reference, but never your card details.
Your shopping bag: stored only in your own browser (the products and quantities you’ve chosen). It isn’t sent to us until you check out.
If you join our waitlist: your email address and, if you choose to give it, your postcode, plus when you signed up.
If you email us: your email address and what you tell us.

We don’t use advertising or analytics tracking, and we don’t create customer accounts.

Why we use it, and our lawful basis

To take, prepare and deliver your order and contact you about it (performance of a contract).
To keep financial records as the law requires (legal obligation).
To prevent fraud and keep our website secure (legitimate interests).

To email you when preorders open, if you joined our waitlist (your consent). We use your postcode, if given, only to see where people would like deliveries. You can withdraw consent at any time by emailing us or using the unsubscribe link in our email.

We won’t send you marketing emails unless you’ve separately agreed to receive them.

Who we share it with

We share only what’s needed, with service providers who process it on our behalf:

Stripe (payments)
Cloudflare (website hosting and order database)
Zoho (our email)
Resend (order confirmation emails)

Some of these providers may process data outside the UK under appropriate safeguards, such as the UK International Data Transfer Agreement or adequacy regulations. We never sell your data.

How long we keep it

Paid orders: 6 years, for tax and accounting records.
Checkouts that were never paid: personal details removed automatically after 30 days.
Waitlist: until you unsubscribe or ask us to remove you, and no longer than 12 months after preorders open.
Emails: as long as needed to deal with your enquiry.

Your rights

You can ask to see the personal data we hold about you, have it corrected or deleted (unless we have to keep it by law), object to or restrict how we use it, or receive a copy in a portable format. Email info@lolascreamy.com; we’ll respond within one month.

You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113, though we’d appreciate the chance to put things right first.