Privacy Policy
Last updated: 14 August 2026
How Gummy Beast collects, uses and protects personal data under the UK GDPR and, for Swedish customers, the EU GDPR.
Who we are
Gummy Beast Ltd, registration number 14892307, Unit 12, Fairfield Works, 45 Bermondsey Street, London SE1 3XF, United Kingdom, is the data controller.
What we collect
Order details (name, delivery address, email, phone), payment confirmation data from our payment provider, and website usage data where you have consented to analytics cookies.
Why we use it
To process and deliver orders, provide customer support, meet legal and accounting obligations, and — with consent — send marketing and measure how the shop is used.
Legal bases
Performance of a contract (orders), legal obligation (accounting), legitimate interests (fraud prevention, service improvement) and consent (marketing and non-essential cookies).
Sharing
We share data with payment processors, fulfilment and delivery partners, and email/support tooling only as needed to run the shop.
Retention
Order and invoice records are kept for 7 years to meet accounting obligations. Support correspondence is kept for 2 years. Marketing consent data is kept until you unsubscribe, and analytics data is kept for 14 months.
Your rights
You can request access, correction, deletion, restriction, portability, or object to processing. Email support@gummybeast.com.
You may also complain to the ICO (UK) or Integritetsskyddsmyndigheten (Sweden).