Chocstop Desserts · Last updated: 15 October 2026
Privacy Policy
Chocstop Desserts is a trading name of ARMA TRADING LTD, company number 17506504.
1. Who we are
Chocstop Desserts is a trading name of ARMA TRADING LTD, company number 17506504. Our business address is 98–100 Manchester Road, Nelson, Lancashire, BB9 7HD, and our phone number is 01282 219809.
ARMA TRADING LTD is the "controller" of the personal information described in this policy. That means we decide how and why it is used, and we are responsible for looking after it.
This policy explains what we collect when you order from us on our website (chocstopdesserts.co.uk), message us on WhatsApp, order through WhatsApp, or contact us in other ways, and what we do with it.
2. The information we collect
- Your name and phone number, which you give us when you place an order.
- Your WhatsApp number and WhatsApp profile name when you message us on WhatsApp, and the messages you send us.
- Your order: the items and options you choose, whether it is for collection or delivery, any notes you add, the times you ordered, and the progress of the order.
- Your delivery address, if you choose delivery.
- Payment references: our payment provider tells us whether a payment succeeded and gives us a reference number and the amount. We never see your full card number.
- Your marketing choice: whether you agreed to hear from us on WhatsApp, when and how you agreed, and whether you have since opted out.
- Records of any questions, complaints or refunds.
- Limited technical information about visits to our website (see section 10).
If you tell us about an allergy or dietary need in your order notes or messages, that can be information about your health. We only use it to prepare your order and to answer your questions about it.
3. Where the information comes from
- From you — when you order on our website, scan one of our QR codes, message us on WhatsApp or contact us.
- From WhatsApp — your WhatsApp number and profile name are shared with us when you message our business number.
- From our payment provider, Stripe — whether your payment went through, and its reference.
4. Why we use it, and our legal reasons
UK data protection law says we must have a lawful reason for each use. Ours are:
- To take, prepare, collect or deliver your order and take payment — because it is needed for our contract with you.
- To send your order confirmation, receipt and order updates, including on WhatsApp — needed for the contract, and in our legitimate interest of keeping you informed.
- To answer your questions, deal with problems and give refunds — needed for the contract, and in our legitimate interests.
- To keep a history of your orders so we can help with queries and make reordering easier — our legitimate interests.
- To prevent fraud and keep our ordering service secure — our legitimate interests.
- To keep accounting and tax records and meet other legal duties — legal obligation.
- If you choose to tell us about an allergy or dietary need, we use that information only to prepare your order safely and to answer your questions about it.
- To send you offers and reorder reminders on WhatsApp — only with your consent (see section 6).
5. Using WhatsApp
We use WhatsApp to send order confirmations and receipts, tell you about the progress of your order, reply when you message us, and — only if you have agreed — send offers and reminders. WhatsApp is provided by WhatsApp (part of Meta).
When you message us or we message you on WhatsApp, WhatsApp handles those messages and related information, such as your phone number, the time a message was sent and whether it was delivered or read. WhatsApp uses that information under its own terms and privacy policy, which we do not control. You can read them in the WhatsApp app or on WhatsApp's website.
Our WhatsApp business number is connected to Whazii, the ordering platform we use (see section 7), so that we can see and manage your orders and messages in one place.
6. Offers and reminders — and how to stop them
- We only send you offers or reorder reminders if you have said yes — for example by ticking the box at checkout (it is never ticked for you), or by tapping "Yes" when we ask after you scan one of our QR codes. Saying no never affects your order.
- Through our online ordering, we send marketing only by WhatsApp.
- To stop marketing messages at any time, reply STOP to us on WhatsApp, or call us. To start them again, reply START or YES.
- We keep a record of when and how you said yes or no, so we can show we are respecting your choice.
- Opting out of marketing does not stop messages about orders you place with Chocstop Desserts.
8. Information outside the UK
Some of our providers, such as Meta, Stripe and the hosting providers behind our ordering service, may handle information outside the UK. When they do, they must protect it using safeguards recognised under UK data protection law, such as UK "adequacy" decisions or approved contract terms.
9. How long we keep it
- Orders, payments and refunds: up to 6 years after the order, so we can meet accounting and tax requirements and deal with any queries or claims.
- WhatsApp messages and other customer-service records: up to 12 months after your order or question has been resolved, unless we need them for longer because of a complaint, a dispute or a legal obligation.
- Your marketing choice: while you are subscribed, and after you opt out for as long as we need to show that we stopped messaging you.
- Details saved in your own browser (section 10): until you clear them.
When we no longer need information, we delete it or make it anonymous.
11. Keeping it safe
We and the providers we use protect your information with appropriate technical and organisational measures, including encrypted connections, restricted staff access and secure payment handling by Stripe. No system is completely secure, so please tell us straight away if you think something has gone wrong.
12. Your rights
Under UK data protection law (UK GDPR) you have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, where we no longer have a good reason to keep it;
- ask us to limit how we use it, or object to how we use it — including an absolute right to object to marketing;
- ask for information you gave us in a portable format, in some cases;
- withdraw your consent at any time, where we rely on it (this doesn't affect what we did before).
We will respond within one month. Some information (for example order records we must keep for tax) may need to be kept even if you ask us to delete it — we will explain if so.
If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
13. How to make a request or contact us
To ask for a copy of your information, or to have it corrected or deleted, or with any other privacy question, contact us:
- Phone: 01282 219809
- Post: ARMA TRADING LTD (Chocstop Desserts), 98–100 Manchester Road, Nelson, Lancashire, BB9 7HD
- In person: ask a member of staff in our shop.
To protect your information we may ask you to confirm who you are — for example by confirming the phone number you ordered with — before we act on a request.
14. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated. This version was last updated on 15 October 2026.