Last updated: 11 September 2026
This page has been drafted with your business details filled in. One action item remains below (ICO registration check) that only you can complete, and we’d still recommend a quick solicitor review before publishing.
1. Who we are
This Privacy Policy explains how DOLCHE LTD (“we”, “us”, “our”), trading as Dolche Botanicals, collects, uses and protects your personal data when you visit www.dolchebotanicals.co.uk or place an order with us. We are the “data controller” for the purposes of UK GDPR and the Data Protection Act 2018.
- Address: 34 Baker Road, Chelmsford, CM1 6GR, United Kingdom
- Company registration number: 13039801
- Email: info@dolchebotanicals.co.uk
- ICO registration number: [ACTION NEEDED — see note at the end of this document]
2. What personal data we collect
Depending on how you use the Site, we may collect:
- Order and account data: name, billing and delivery address, email address, phone number, order history.
- Payment data: we do not store your full card details. Payments are processed directly by our payment providers, Stripe and/or PayPal, who act as independent data controllers for the payment information you give them.
- Contact form data: name, email address and any message content you submit via our contact form.
- Technical and usage data: IP address, browser and device type, pages viewed, and how you interact with the Site, collected automatically via cookies and similar technologies (see Section 5).
3. How we use your data, and our legal basis
| What we use it for | Legal basis |
|---|---|
| Processing and delivering your order, handling payments, returns and customer service | Performance of a contract with you |
| Keeping records for accounting and tax purposes | Legal obligation |
| Responding to messages sent via our contact form | Legitimate interests (responding to your enquiry) / consent |
| Understanding how visitors use the Site (analytics), improving the Site | Consent (via cookie preferences) / legitimate interests |
| Preventing fraud and keeping the Site secure | Legitimate interests |
4. Who we share your data with
We share personal data with the following categories of third party, only as needed to run the Site and fulfil your order:
- Payment providers: Stripe and/or PayPal, to process payments.
- Delivery/courier partners: our delivery courier, to deliver your order within the UK.
- Website and analytics services: Google (Site Kit / Google Analytics, Search Console) and Microsoft Clarity, which help us understand how visitors use the Site, including session recordings and heatmaps of on-site behaviour. These only run after you consent via our cookie banner.
- Website hosting and infrastructure: our website hosting provider, who hosts the Site and its database; UpdraftPlus, which manages Site backups.
- Email delivery: our transactional email provider (via WP Mail SMTP), to send order confirmations and other transactional emails.
- Professional advisers and authorities: where required by law, for example HMRC for tax purposes.
We do not sell your personal data to third parties.
5. Cookies and tracking
The Site uses cookies and similar technologies, including:
- Essential cookies needed for the Site and shopping cart/checkout to function.
- Analytics cookies (Google Analytics via Site Kit) that help us understand overall visitor traffic and behaviour.
- Session recording (Microsoft Clarity), which may record how you move around and interact with pages on the Site, to help us improve it.
We use CookieYes to manage cookie consent. Analytics and session-recording cookies are not strictly necessary for the Site to function, so they only load after you give consent via our cookie banner. You can change your preferences at any time using the cookie icon on the Site.
6. International transfers
Some of the third parties above (for example Google, Microsoft, Stripe and PayPal) may process data outside the UK/EEA. Where this happens, they do so under recognised safeguards, such as the UK’s International Data Transfer Agreement or the EU Standard Contractual Clauses (as adopted for UK use).
7. How long we keep your data
We keep order and transaction records for as long as required for accounting and tax purposes (typically 6 years, per HMRC record-keeping requirements). Contact form enquiries are kept only as long as needed to deal with your enquiry, and are then deleted.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you;
- Have inaccurate data corrected;
- Ask us to delete your data, in certain circumstances;
- Restrict or object to certain processing;
- Receive your data in a portable format;
- Withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email info@dolchebotanicals.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data properly.
9. Children
The Site is not directed at children, and we do not knowingly collect personal data from children.
10. Security
We use reasonable technical and organisational measures to protect your personal data, including secure (HTTPS) connections and restricted access to customer data. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.
11. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date.
12. Contact us
DOLCHE LTD, trading as Dolche Botanicals
Email: info@dolchebotanicals.co.uk
Address: 34 Baker Road, Chelmsford, CM1 6GR, United Kingdom
Company registration number: 13039801
Note on ICO registration: most UK businesses that process personal data electronically are legally required to pay the ICO’s data protection fee and register as a data controller, unless a specific exemption applies. If you haven’t already checked this for DOLCHE LTD, it’s worth doing at ico.org.uk before this policy goes live, then adding your registration number to Section 1 above.