Terms & Conditions and Privacy policy

TERMS & CONDITIONS AND PRIVACY POLICY

Peppermints.r.wrapped.co.uk

Effective Date: 14/03/2026

These Terms and Conditions, together with the Privacy Policy contained herein, govern the use of the website Peppermints.r.wrapped.co.uk (the "Website") and the purchase of goods offered through this Website.

By accessing or using this Website and placing an order, you confirm that you have read, understood, and agree to be bound by these Terms and Conditions.

1. DISCLAIMER

This document is provided for informational purposes only.

The operator of Peppermints.r.wrapped.co.uk makes reasonable efforts to ensure the accuracy of the information on this Website. However, the Website operator shall not be held liable for any loss, damage, or inconvenience arising from reliance on information contained on this Website.

Users acknowledge that they use this Website and its content at their own risk.

Nothing within these Terms excludes liability where such exclusion is prohibited by applicable law.

2. DATA CONTROLLER

For the purposes of the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is:

Peppermints.r.wrapped.co.uk

(Hereinafter referred to as the "Controller").

Contact details:

Email: peppermints.r.wrapped@gmail.com

3. PERSONAL DATA DEFINITION

Personal data refers to any information relating to an identified or identifiable natural person, including but not limited to:

• Name
• Address
• Email address
• Telephone number
• Payment details
• IP address
• Order history

4. SOURCE OF PERSONAL DATA

The Controller processes personal data obtained through:

1. Customer registration on the Website
2. Orders placed through the e-commerce store
3. Customer communications
4. Website analytics tools
5. Consent provided by the Customer

The Controller processes only the personal data necessary to fulfil contractual obligations and provide services.

5. PURPOSE OF DATA PROCESSING

Personal data is processed for the following lawful purposes:

1. Contractual Performance

Processing orders, delivering goods, and providing customer support.

Information processed may include:

• Name
• Billing address
• Delivery address
• Email address
• Telephone number

2. Legal Compliance

Maintaining accounting records, tax reporting, and regulatory compliance.

3. Legitimate Business Interests

Improving website functionality, fraud prevention, and operational administration.

4. Consent-Based Processing

Where applicable, personal data may be used for marketing communications if explicit consent has been given.

Customers may withdraw consent at any time.

6. DATA STORAGE PERIOD

Personal data is stored only for as long as necessary.

Typical retention periods include:

• Contractual data: up to 3 years after completion of the contract
• Accounting records: 6 years in accordance with UK tax legislation
• Marketing consent records: until consent is withdrawn

After these periods, personal data is securely deleted or anonymised.

7. DATA SHARING AND PROCESSORS

The Controller may share personal data with trusted third-party service providers where necessary to operate the business.

These may include:

• Webnode AG – e-commerce platform provider
• Payment processors (e.g., Stripe, PayPal, or equivalent)
• Shipping and logistics companies
• Website analytics providers such as Google Analytics

All third-party processors are required to comply with applicable data protection regulations.

The Controller does not sell personal data to third parties.

8. INTERNATIONAL DATA TRANSFERS

Where personal data is transferred outside the United Kingdom or European Economic Area, the Controller ensures appropriate safeguards are in place, including:

• Standard Contractual Clauses
• Adequacy decisions
• Equivalent legal protections

9. CUSTOMER RIGHTS UNDER GDPR

Under the United Kingdom General Data Protection Regulation, customers have the right to:

1. Request access to their personal data
2. Request correction of inaccurate data
3. Request deletion of personal data ("Right to be Forgotten")
4. Object to the processing of personal data
5. Request restriction of processing
6. Request transfer of personal data to another provider (data portability)
7. Withdraw consent where processing is based on consent

Requests may be submitted to:

Peppermints.r.wrapped@gmail.com

10. COMPLAINTS

Customers have the right to lodge a complaint with the supervisory authority if they believe their data has been processed unlawfully.

In the United Kingdom, the supervisory authority is:

Information Commissioner's Office

Website: https://ico.org.uk

11. DATA SECURITY

The Controller implements appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or misuse.

These measures include:

• Secure password-protected systems
• Encrypted communications where applicable
• Anti-virus and malware protection
• Secure hosting environments
• Regular system maintenance and monitoring

While reasonable steps are taken to protect personal data, no internet transmission can be guaranteed to be completely secure.

12. COOKIES AND WEBSITE ANALYTICS

The Website uses cookies and analytics tools to improve functionality and user experience.

These may include:

• Essential website cookies
• Analytics cookies (e.g., Google Analytics)
• Performance tracking cookies

Users may control cookie settings through their browser preferences.

13. CUSTOMER CONSENT

By placing an order on the Website and ticking the relevant consent checkbox, the Customer confirms that they have read and accepted these Terms and Conditions and the associated Privacy Policy.

14. LIMITATION OF LIABILITY

To the fullest extent permitted by law, the Website operator shall not be liable for any indirect, incidental, or consequential damages arising from the use of this Website or the purchase of goods through it.

Nothing in these Terms shall exclude liability for:

• Death or personal injury caused by negligence
• Fraud or fraudulent misrepresentation
• Any liability that cannot legally be excluded

15. CHANGES TO THESE TERMS

The Controller reserves the right to amend these Terms and Conditions and Privacy Policy at any time.

Updated versions will be published on the Website and become effective immediately upon publication.

Customers are encouraged to review this page periodically.

16. GOVERNING LAW

These Terms and Conditions shall be governed by and interpreted in accordance with the laws of England and Wales.

17. EFFECTIVE DATE

These Terms and Conditions come into effect on:

14/03/2026