Privacy

Your information.
Handled properly.

What we collect, why we need it and who sees it.

1. Who controls your information.

Chonkie is a business partnership between Will Walker and Sophie Howe, trading as Chonkie. For UK data-protection purposes, Chonkie is the controller of personal information collected through this website where we decide how and why that information is used.

Contact: hello@chonkie.co.uk. Business correspondence: 1 West Walks, Dorchester, Dorset, DT1 1RE.

2. Information we collect.

Depending on how you use Chonkie, we may collect your name, email address, telephone number, billing or delivery address, order and transaction information, gift-message content, correspondence with us, business and job information supplied through B2B or trade forms, account details where an account is used, and technical information such as IP address, browser, device and basic security logs.

Payment providers may process card and payment details. Chonkie does not receive your full payment-card number from Square-hosted checkout.

3. Where information comes from.

Most information comes directly from you when you place an order, complete a form, create or use an account, claim a Chonkie Send, contact us or otherwise interact with the service. We may also receive transaction or service-status information from providers we use to operate the site.

4. Why we use it.

Orders & fulfilmentTo take steps at your request, process and fulfil orders, deliver boxes, provide order updates and customer support. Our lawful basis is principally contract.

PaymentsTo create payment sessions, reconcile payments, handle refunds and prevent payment abuse. This is necessary for contract performance and our legitimate interests in secure commerce.

Legal & accountingTo keep records and meet tax, accounting, food-business and other legal obligations. Our lawful basis is legal obligation where applicable.

Security & fraud preventionTo protect customers, Chonkie and the service from misuse, fraud and security incidents. We rely on legitimate interests where appropriate.

Enquiries & relationshipsTo respond to trade, gifting and support enquiries and manage ongoing business relationships. This may rely on pre-contract steps or legitimate interests.

MarketingWhere we ask you to opt in to marketing, we use consent. You can withdraw that consent at any time without affecting ordinary order or service messages.

5. Consumer orders.

For DTC orders we use the contact, basket, payment-status and delivery information needed to take payment, fulfil the order, send transactional messages, deal with problems and maintain business records.

6. B2B Sends and Crew.

For a direct B2B Send, the sender may provide recipient details needed to fulfil the physical gift. For a Crew claim, the claimant provides their own fulfilment information directly to Chonkie. A Crew claimant's delivery address and optional work email are not made visible to the seller through the V1 seller interface.

Receiving, opening or claiming a Chonkie is not, by itself, consent to marketing.

7. Who we share information with.

We share personal information only where needed to operate the service, fulfil an order, comply with law or protect legitimate interests. Current service categories include:

Square for hosted online payment processing and payment-status information.
Supabase for application data, database services and authentication used by relevant Chonkie features.
Resend for transactional and, where consented, marketing email delivery.
Netlify for website hosting, deployment and hosted form infrastructure.
Google Analytics, only with Analytics consent, for website and ecommerce measurement.
Meta, only with Marketing consent, for advertising measurement. Purchase matching may use hashed purchaser/contact email and phone plus existing Meta browser identifiers and browser User-Agent. Hashing is a security transformation, not anonymisation.
HomeData where address lookup or address verification is used.
delivery and fulfilment providers where they need recipient and address information to deliver an order.
professional advisers, regulators, law-enforcement bodies or other authorities where disclosure is required or permitted by law.

8. International processing.

Some technology providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we expect the relevant provider or transfer arrangement to use an applicable adequacy decision, recognised contractual safeguards or another lawful transfer mechanism.

9. How long we keep information.

We keep information only for as long as reasonably needed for the purpose it was collected for. Order, payment and accounting records may be retained for the period needed to meet tax, accounting, dispute and legal obligations. Enquiry information is kept while the enquiry or business relationship remains relevant. Marketing data is kept until you unsubscribe or we no longer have a lawful reason to use it. Security records may be retained for a shorter period appropriate to investigation and protection of the service.

10. Cookies, storage and campaign attribution.

The storefront uses necessary browser storage to remember your basket, authentication or security state where relevant, and your cookie preferences. Chonkie also has controls for optional analytics and marketing technologies so those tools can respect the choices shown in Cookie settings.

Where you have enabled Analytics, Google Analytics may measure page views and ecommerce interactions such as viewing products, viewing the basket, adding or removing boxes, beginning checkout and completing a paid order. We may also retain bounded campaign information such as utm_source, utm_medium, utm_campaign, utm_content and utm_term so we can understand which Chonkie campaigns lead to orders. This information is attached to an order only where it is available and is not required to complete checkout.

When Marketing is enabled, Meta Pixel can measure page and shopping interactions. At checkout we may retain existing _fbp and _fbc values and the browser User-Agent, then send a server-side purchase event after Square confirms payment. We do not send delivery-recipient address details for this matching, and the first implementation does not send the customer IP address.

See our Cookie policy or use Cookie settings in the footer to review or change optional preferences.

11. Your rights.

Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase personal information, restrict or object to processing, receive certain information in a portable form, and withdraw consent where consent is the lawful basis. These rights are not absolute in every case.

You have an absolute right to object to direct marketing. To exercise a privacy right or ask a question, email hello@chonkie.co.uk. We may need to verify your identity before acting on a request.

12. Complaints.

Please contact us first if you have a concern about how we use your information. You also have the right to complain to the UK Information Commissioner's Office (ICO).

13. Security.

We use reasonable technical and organisational measures to protect personal information. No online system can be guaranteed completely secure, so please do not send highly sensitive information through ordinary email or free-text website fields unless we specifically ask for it.

14. Changes to this policy.

We may update this policy when our services, providers or legal obligations change. We'll publish the current version here and update the date below.

Last updated: 30 September 2026.

Your information.Handled properly.