Skip to main content

Privacy policy

How we collect, use and protect your personal data.

Last updated: 7 September 2026

Who we are

This website is operated by Cocoa Mill Ltd, trading as The Cocoa Mill ("we", "us", "our"), a company registered in England and Wales, company number 17443488, registered office at 176 Newton St, Macclesfield, SK11 6RW. Cocoa Mill Ltd is the data controller for all personal data collected through this website.

If you have any questions about this policy or how we handle your data, contact us at hello@thecocoamill.co.uk.

What data we collect

We do not use analytics or advertising tools to identify or track visitors. Our hosting provider, Cloudflare, may process limited technical information such as IP addresses, browser details and request logs to operate and secure the website. When you contact us by email, WhatsApp or social media, you may choose to share information such as your name, email address, phone number and the content of your message.

We do not collect any sensitive personal data, payment information, or data from children.

Why we collect it and our lawful basis

We use your contact details solely to respond to your enquiry. Our lawful basis for processing is legitimate interests (Article 6(1)(f) UK GDPR): you have actively contacted us, and it is in both parties' interests for us to respond.

We do not use your data for marketing, profiling, or any automated decision-making.

How we use and store your data

Messages sent by email, WhatsApp or social media are processed by those providers under their own privacy policies and terms. We do not sell, rent or share your personal data with any other third parties.

How long we keep your data

We keep enquiry correspondence for up to 12 months after we last hear from you, unless you ask us to delete it earlier.

Cookies and tracking

This website does not use analytics cookies, advertising cookies or third-party tracking scripts. We do not currently set cookies or store information on your device. If that changes, we will update this policy and request consent where UK PECR requires it.

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your personal data
  • Right to restriction — request that we limit how we use your data
  • Right to object — object to processing based on legitimate interests
  • Right to data portability — request your data in a structured, machine-readable format

To exercise any of these rights, email us at hello@thecocoamill.co.uk. We will respond within one month. There is no charge for reasonable requests.

Right to complain

If you are unsatisfied with how we have handled your data, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO):

Changes to this policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated date at the top. We encourage you to review this page periodically.