Privacy Policy

At Treat Trunk, we know that our customers take privacy and security seriously, and so do we. We have set out below the procedures we use for safeguarding your personal data. Please read this Privacy Policy carefully and check it occasionally as it could change from time to time. This privacy policy follows the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The bulk of the content here relates to orders placed through our website. For corporate orders placed manually, please see the section ‘Corporate Orders’.

TREAT TRUNK’S PRIVACY PROMISE

Treat Trunk is dedicated to safeguarding your privacy online. We will only collect, store and use your personal information for specific purposes as outlined below in accordance with GDPR. We use your personal data to support and develop our connection with you and to deliver our products and services to you.  We do use 3rd party services, however all 3rd party providers we use are also GDPR compliant, will never sell your data and will protect it at all times. The majority of 3rd party services we use will have minimal access to data, if any at all. You may contact Treat Trunk at any time with any privacy queries or concerns and to see the personal data you have given us and request modification.

Personal data means any information relating to an identified or identifiable natural person. This can include name, email address, address, IP address and much more.

WHO WE ARE

TREAT TRUNK LTD is an active Private Limited, registered at Companies House under the number 15624707. Our website address is: https://treattrunk.co.uk.

WHAT PERSONAL DATA WE COLLECT AND WHY WE COLLECT IT

COMMENTS

When visitors leave comments on the website, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

MEDIA

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

CONTACT FORMS

When you send us an enquiry through one of our quote or contact forms, we collect the details you enter so we can reply to you. We email you a confirmation, and check through our email provider that it was delivered, so we know we have the right address. To help us spot spam and understand how people find us, we also record some technical details with the enquiry: your IP address and the network and approximate location it belongs to (looked up using ipinfo.io), your device and browser type, how you arrived at our website (for example from a search engine or a link), the pages you viewed before sending it and how long you spent on them. Your browser keeps a short record of the pages you visit on our site; it stays on your device and is only sent to us if you submit a form. We use these details only to handle your enquiry and keep them with it.

COOKIES

If you leave a comment on our website you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this website, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

When you first visit our website, our cookie banner asks whether you are happy for us to use Google’s analytics and advertising cookies. These are only set if you click Accept, and you can change your mind at any time using the “Privacy & Cookies Policy” tab at the bottom of each page. Cookies that the website needs to work, such as those that keep items in your basket, are always set. You can also block or delete cookies through your browser settings, although some parts of the website, such as the basket, will not work without them.

OUR COOKIE POLICY:

Please note: to make full use of the Treat Trunk website and to benefit from a selection of personalised features, your computer, tablet or mobile phone will need to be set up to accept cookies.

What is a cookie?

A cookie is a small text file which is downloaded and stored on your computer or mobile device by websites that you visit.

Your browser accesses the cookie file only when you visit the website that produced it. This helps to ease your navigation by automatically logging you in and remembering things like your preferences and what’s in your shopping basket.

The information stored within any given cookie can only be accessed by the website that created it and cookies are limited to communicating only the information that you have disclosed to the site.

Types of cookie:

Session (or Transient) Cookies

Session cookies are stored in your computer’s memory for the length of your browsing session. They become inaccessible after the session has been inactive for a time and are automatically deleted from your computer when the browser is closed. They allow you to move from page to page without having to log-in repeatedly.

Persistent Cookies

Persistent cookies are stored in your computer memory and are not deleted when the browser is closed. They are used to keep your preferences for the website, so they will be remembered for next time you visit the website. They are also used to collect information about the numbers of visitors, the average time spent on a particular page and analyse shopping behaviour on the website. This information is used to find out how well the website works and where it can be improved.

EMBEDDED CONTENT FROM OTHER WEBSITES

Articles on this website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

THESE WEBSITES MAY COLLECT DATA ABOUT YOU, USE COOKIES, EMBED ADDITIONAL THIRD-PARTY TRACKING, AND MONITOR YOUR INTERACTION WITH THAT EMBEDDED CONTENT, INCLUDING TRACKING YOUR INTERACTION WITH THE EMBEDDED CONTENT IF YOU HAVE AN ACCOUNT AND ARE LOGGED IN TO THAT WEBSITE.

PIXELS

Google Analytics
This Cookie is placed by Google. It enables Treat Trunk to learn information about our users use of the Treat Trunk web site such as the time of visit, the pages viewed, whether the user has visited before and the web site visited prior to visiting the Treat Trunk web site.
For further information about Google Analytics please see:
https://policies.google.com/technologies/cookies

Most of our cookies expire within 30 days, although our analytics cookies may persist for 1 year.

ADVERTISING

We currently use tracking code from Google (Google Ads) to measure which of our adverts lead to orders and to show our adverts to people who have visited our website. Like Google Analytics, it only runs if you click Accept on our cookie banner. We may add other platforms if opportunities to share our product with a wider audience becomes available.

YOUR INFORMATION

When you register on our website, or contact us via phone or email, to purchase services, we ask for data such as your name, e-mail address, billing address, and contact details. Treat Trunk keeps a record of this information for tax purposes and for ensuring we fulfil our contract with you.

The only personal information we hold is what customers provide to us when they place an order on our website or via email, sign up for the newsletter, or sign a contract.

We share your data with a small number of GDPR compliant companies like our email providers (ActiveCampaign for our newsletter, and Mailjet for order, account and enquiry emails), review platforms such as Trustpilot (to invite you to review your order), couriers (to pass addresses to), and accounting systems which are GDPR compliant and for which we have data processing agreements in place. We may store your data on relevant systems such as cloud systems. If we are required by law to share any information, we will check with each party concerned to ensure they are happy for that to happen. An example of this would be if HMRC requested an audit.

We store sensitive data for as long as projects are in progress and customers remain active clients. Email addresses provided via ActiveCampaign are stored until consent is withdrawn or after 2 years if not further contact is made. We re-request consent to store this personal data every 2 years. Information required for tax and legal requirements are held for 7 years as a requirement by law.

We keep a record of any orders you make from us, so we can help to deal with any enquiries or problems you may have in the future, and so we can ensure that any information that we send to you is appropriate. Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

We keep a record of any e-mail communication you send us, so we can track any problems or concerns you’ve had.

We’ll also ask you questions at registration, and from time to time by email (if we have your consent to contact you by email), this will give us data that can be used to improve your experience of shopping with Treat Trunk. You’re under no obligation at all to answer these questions, they’re all optional, but they will help us communicate more effectively with you.

We may process information you submit to us when you contact us for the purposes of ensuring we answer your query effectively.

HOW LONG WE RETAIN YOUR DATA

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

CORPORATE ORDERS

For orders received outside of our website we request addresses to be sent via password protected Excel file. The password can be sent via WhatsApp for extra security since WhatsApp is end-to-end encrypted. The addresses will be kept for 30 days to allow us to track undelivered items and after this time the file will be deleted permanently. If you wish to have the addresses deleted sooner than 30 days, please let us know and we will do so.

We share your data with a small number of GDPR compliant companies such as couriers (to pass addresses to), and accounting systems which are GDPR compliant.

WHAT RIGHTS YOU HAVE OVER YOUR DATA

You can request:

  1. to receive an exported file of the personal data we hold about you, including any data you have provided to us;
  2. that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes;
  3. that we rectify any personal data we hold for you;
  4. that we restrict the ways we process your personal data;
  5. that you withdraw your consent to us processing your data;
  6. portability of your personal data to another entity;
  7. the right to object to any personal data we have on you;
  8. the right to avoid automated decision making.

If you would like to exercise any of the above rights, you can do so by contacting us using the contact details below. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, although we would appreciate the chance to put things right first.

WHERE WE SEND YOUR DATA

Visitor comments may be checked through an automated spam detection service.

How we use your personal data

All the data we gather via our website or through communication with you is used to operate and expand the service we offer you and to personalise our service. How we use your personal data is dependent on the legal basis for processing your data. We are dedicated to using your personal data only for:

  1. Processing your orders correctly.
  2. Development and expansion of the business, including examination of customers’ shopping behaviours, measurement of advertisements and product style preferences of our customers.
  3. Technical management of our website.
  4. Reviewing our systems
  5. Providing you with information about the services we offer.
  6. Letting you know about offers and news.
  7. Customised advertising on other GDPR compliant platforms like Facebook if you consent.

 

Legal Basis for Processing Data

Treat Trunk’s lawful basis for processing data are:
Consent – customers that consent to signing up for our newsletter, or order goods and services via Treat Trunk.

Legal Obligation – for legal and tax purposes.

Legitimate interest – for any individuals or corporations we believe may be interested in our products and who we selectively market our products to.

How we protect data

You recognise that the Internet is not a 100% secure platform for communication and, accordingly, we cannot guarantee the security of any data you send to us (or we send to you) via the Internet. We are not responsible for any damages which you, or others, may suffer as a result of the loss of confidentiality of such information.

We take every precaution to safeguard your information. All personal data stored by us is kept on a server in a secure environment. The computer on which work is conducted on is password protected, data held in the cloud is password protected and held on encrypted systems and third-party software have their own security systems.

The risks of a breach are minimal due to the precautions mentioned above being taken, and close monitoring is undertaken to ensure security systems are always up to date. Breaches will be identified, reported, managed, and resolved according to the ICO guidelines.

All Treat Trunk data is held for only as long as necessary. We store sensitive data for as long as projects are in progress. Email addresses provided via ActiveCampaign are stored until consent is withdrawn, reconsent is requested every 2 years. Information required for tax and legal requirements are held for 7 years as a requirement by law.

We do not store or process your card details ourselves. Payments are processed by Stripe, either directly or through WooPayments, which also provides Apple Pay, Google Pay, Klarna and Clearpay. Please see the privacy policy of the payment provider you choose for their information on this matter.

How you can help us protect your data

Please bear in mind that whenever you willingly divulge personal data online in non- protected situations – for example on message forums, through email, or in chat spaces – that data can be collected and used by others. In short, if you post personal data online that is accessible to the public, you may receive unsolicited communications from other parties in return. Also remember to close your browser window when you have finished using the computer. This is to ensure that others cannot access your personal data and communications. If you share a computer with someone else or are using a computer in a public place like a library or Internet café. We cannot confirm or warrant the security of any data you communicate to us, and you do so at your own risk. Once we receive your communication, we make our best effort to ensure its security on our systems.

Further information

If you have questions about your personal data or our privacy policy, please contact us. To exercise any of your rights with respect to personal data, please write to us at: hello@treattrunk.co.uk.

Changes to privacy policy

We reserve the right to amend our privacy policy, whilst keeping it within all appropriate legislation and guidelines. We will do all we can to ensure that these pages show the most up to date information always and may notify you of such changes by uploading the revised privacy policy on the Treat Trunk website.

Sharing with social networks

Our website links to our pages on social networks such as Instagram, Facebook, Pinterest, YouTube and X (Twitter). If you follow these links, that company’s own privacy policy applies. Find out more here:

https://privacycenter.instagram.com/policy https://www.facebook.com/privacy/policy/ https://policy.pinterest.com/en-gb/privacy-policy https://policies.google.com/privacy https://x.com/en/privacy

Marketing Material

If you’re happy to receive marketing communications by email, you may sign up for our newsletter. This means you will receive regular marketing updates including freebies, special offers, industry news, and tips and advice.

You may unsubscribe and have the right to be forgotten at any time. We will never spam you or sell your email address to 3rd parties.

Contact Information

Treat Trunk Ltd – Trading as Treat Trunk

86-90 Paul Street, London EC2A 4NE

hello@treattrunk.co.uk

Last Updated: Oct 2026