Privacy Policy

Last updated: 26 October 2026

This policy explains how Yoghurt of Youth collects, uses, and protects your personal data when you visit our website or place an order, and sets out your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Yoghurt of Youth is a sole trader business based in the United Kingdom. We are the "data controller" responsible for your personal data. You can contact us via email at support@yoghurtofyouth.co.uk.

What data we collect

Depending on how you interact with us, we may collect:

• Order information — your name, delivery address, email address, and phone number, so we can process and deliver your order.
• Payment information — card and billing details, which are collected and processed securely by our payment provider, Stripe. We do not store your full card details ourselves.
• Marketing information — your email address, if you sign up to our mailing list or discount offers.
• Website usage information — data collected through cookies and similar technologies when you browse our site, such as pages visited and general activity, used for analytics and advertising.

How we use your data, and our lawful bases

We use your data only where we have a lawful basis to do so:

• To fulfil your order (processing payment, arranging delivery, sending order confirmations). Lawful basis: performance of a contract.
• To send you marketing emails (offers, updates, and product information), where you have signed up. Lawful basis: your consent, which you can withdraw at any time.
• To improve our website and advertising through analytics and marketing tools. Lawful basis: our legitimate interests in running and promoting our business.
• To meet legal obligations, such as keeping records for tax and accounting. Lawful basis: legal obligation.

Who we share your data with

We use trusted third-party service providers ("processors") to run our business. We only share the data necessary for each service, and these providers are bound to protect it. They include:

• Stripe — secure payment processing.
• Klaviyo — email marketing and mailing list management.
• Resend — sending order confirmations and other transactional emails.
• Meta (Facebook/Instagram) — advertising and measuring the performance of our ads.
• Vercel — website hosting.
• Upstash — secure data storage supporting our website's functions.
• DPD — delivery of your order.

Some of these providers may process data outside the UK. Where they do, we rely on their appropriate safeguards (such as standard contractual clauses) to protect your data. We do not sell your personal data to anyone.

How long we keep your data

We keep your data only as long as necessary for the purposes above. Order and transaction records are kept for as long as required by law (for example, tax records are generally kept for six years). Marketing data is kept until you unsubscribe or ask us to remove it.

Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to delete your data, where there is no ongoing reason to keep it.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent to marketing at any time (every marketing email includes an unsubscribe link).
• Request a copy of your data in a portable format.

To exercise any of these rights, email us at support@yoghurtofyouth.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

Cookies and tracking

Our website uses cookies and similar technologies, including the Meta Pixel and Klaviyo's onsite tracking, to understand how visitors use our site and to measure and improve our advertising. You can control cookies through your browser settings. We will continue to develop our cookie controls over time.

Google customer reviews

We use the Google Business Profile API to display public reviews of Yoghurt of Youth, including the reviewer's public name and profile photo, star rating, review text and date. We also display the overall rating and review count supplied by Google. We use this information to help visitors learn about customers' experiences with our business. Our lawful basis is our legitimate interest in presenting customer feedback.

Our business owner authorises this connection. Visitors do not need to sign in with Google. Access credentials are kept on our server and are never sent to visitors. Review data is temporarily cached for around one hour to improve performance, then refreshed when requested. Profile photos are loaded from Google's image servers, which receive your IP address and normal browser connection information. We do not use this Google review data for advertising targeting or sell it. You can edit or delete your review through Google, and changes will appear after our cache refreshes. You can also contact us using the email above about its display on our website.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

If you have any questions about this policy or how we handle your data, please contact us at support@yoghurtofyouth.co.uk.