Privacy Policy

​

When Cookie Met Brownie
Last updated: 26 October 2026

​

At When Cookie Met Brownie, we take your privacy seriously. This Privacy Policy explains how we collect, use and protect your personal information when you visit our website, place an order or join our Cookie Club.

​

1. Who We Are

When Cookie Met Brownie is a UK-based small business operated by Jodi Cranton as a sole trader.

Website: www.whencookiemetbrownie.co.uk
Email: contact@whencookiemetbrownie.co.uk

For the purposes of UK data protection legislation, Jodi Cranton, trading as When Cookie Met Brownie, is the data controller.

​

2. Information We Collect

Depending on how you interact with our business, we may collect:

• Your name

• Email address

• Telephone number

• Billing and delivery addresses

• Order and purchase information

• Payment transaction details

• Birthday (if voluntarily provided)

• Messages and enquiries you send us

• Website usage information and cookie data

We only collect information that is relevant to providing our products and services.

​

3. How We Use Your Information

We use your personal information to:

• Process and fulfil orders

• Arrange deliveries and collections

• Respond to customer enquiries

• Provide customer service

• Manage our website and online shop

• Send Cookie Club newsletters and promotional emails where you have consented

• Share new products, weekly menus and exclusive offers

• Send birthday treats or special birthday offers where applicable

• Improve our website and customer experience

• Meet our legal and accounting obligations

​

4. The Cookie Club

When you join our free Cookie Club, we collect your email address and any additional information you choose to provide.

By signing up, you agree to receive marketing emails from When Cookie Met Brownie, which may include:

• Weekly shed menus

• New flavours and product launches

• Exclusive Cookie Club discounts

• Early access to special offers

• Birthday treats

• Business news and updates

​

We use MailerLite to manage our subscriber list and send emails.

You can unsubscribe at any time by clicking the unsubscribe link included in our marketing emails or by contacting us directly.

Joining the Cookie Club is completely optional.

​

5. Birthday Information

Cookie Club members may choose to provide their birthday to receive special birthday offers or treats.

Providing this information is optional, and it will only be used for the purposes explained when you sign up.

You can request that we remove your birthday information at any time.

​

6. Online Orders and Payments

When you place an order through our website, we collect the information necessary to process your purchase.

Our website is hosted by Wix, which provides our online shopping platform.

Payments are processed through the payment providers available at checkout.

We do not intentionally collect or store your full payment card details ourselves.

Orders placed through TikTok Shop are also subject to TikTok Shop’s applicable privacy information.

​

7. Sharing Your Information

We do not sell your personal information.

We may share relevant information with trusted service providers where necessary to operate our business, including:

• Wix – website hosting and online orders

• MailerLite – email marketing and subscriber management

• TikTok Shop – orders placed through TikTok

• Payment processors – secure payment transactions

• Delivery providers – fulfilling customer orders

​

We only share information where necessary and require appropriate data protection safeguards.

​

8. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Contract: To process orders and provide products you have purchased.

Consent: To send Cookie Club marketing emails and use optional birthday information for birthday promotions.

Legal obligation: To maintain records required for tax, accounting and other legal purposes.

Legitimate interests: To respond to enquiries, maintain our website, prevent fraud and improve our services, where those interests are not overridden by your rights.

You can withdraw your consent to marketing at any time.

​

9. How Long We Keep Your Information

We keep personal information only for as long as necessary for the purposes described in this policy.

Order and financial records may be retained for up to six years, or longer where required by law.

Cookie Club information is retained while you remain subscribed, unless we need to retain limited information to respect an unsubscribe request or meet legal obligations.

You may request deletion of your personal information, subject to any legal requirements.

​

10. Cookies and Website Analytics

Our website uses cookies and similar technologies to support essential website functions and, where enabled, understand how visitors use our website.

Some cookies are necessary for the website to function correctly.

Non-essential cookies, such as certain analytics or advertising cookies, will only be used where the required consent has been obtained.

You can manage your cookie preferences through the options provided on our website, where available.

​

11. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where international transfers take place, we take steps to ensure appropriate safeguards are in place in accordance with applicable UK data protection legislation.

​

12. Your Rights

Under UK data protection law, you may have the right to:

• Access the personal information we hold about you

• Request corrections to inaccurate information

• Request deletion of your information

• Object to certain uses of your information

• Restrict certain processing activities

• Request transfer of your information where applicable

• Withdraw consent at any time

​

To exercise your rights, please contact:

contact@whencookiemetbrownie.co.uk

​

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO).

​

13. Keeping Your Information Secure

We take reasonable steps to protect your personal information and use established third-party platforms to manage website transactions, orders and email subscriptions.

Access to personal information is limited to those who need it for legitimate business purposes.

​

14. Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes to our business, services or legal obligations.

Any updates will be published on this page with a revised date.

​

15. Contact Us

If you have any questions about this Privacy Policy or how your information is used, please contact:

When Cookie Met Brownie
Jodi Cranton
Email: contact@whencookiemetbrownie.co.uk