Got a question? Shoot us an email!

Privacy Policy

Who are we?

At Taffy Mail, we’re committed to maintaining the trust and confidence of our visitors and subscribers. We’re not about buying, trading or selling email lists for marketing – we don’t do anything that our founders wouldn’t be happy with. This privacy notice spells it out, with a bit more detailed information of when, how and why we collect your personal information, how we use it, and how we keep it secure.

What data is being collected?

The data we collect is broken down into three categories:

Website Visitors

People who visit our site are tracked through cookies with Google Analytics, this enables us to collect standard internet log information and details of visitor behaviour patterns. We do this to find out useful general information, like the number of visitors and where they go on our site. This information is processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of visitors to our website.

We use Facebook tracking data for similar purposes – it allows us to track and improve the efficacy of our Facebook marketing efforts, we can’t (and don’t) target people specifically, but we do show adverts to groups of people who have visited our site.

Mailing Lists

If you sign up to our mailing list (to receive our newsletter), we collect a little more personal information. We use that information for one reason – to keep you in the loop of what we’re up to – in terms of new offers, news and other info that you might be interested in – we’re a candy business, not a spam business! We’ll also sometimes contact you via email to ask for feedback. We don’t rent or trade email lists with other companies – if we want to feature someone else’s business, we’ll pop it in our newsletter.

We use a third-party provider, MailChimp, to deliver our newsletter. They are more or less industry standard, and we use them to gather statistics of opening and clicks, to help us monitor and improve our emails. MailChimp’s privacy policy can be found here. It’s easy to unsubscribe – we provide a link at the bottom of every email we send!

Subscriber Sign Ups

When you sign up to Taffy Mail, we also collect card details and your address. This allows us to take payment and ship your Taffy Mail to your house or workplace, and we use your email address to let you know when we dispatch. We also use email addresses with this data to ascertain statistics on average subscription duration, and other useful insights into how we’re doing, alongside necessary administrative tasks, such as arranging postage labels.

Payment data is stored through Moonclerk and Stripe, Stripe is the industry-leading payment provider and Moonclerk is a dashboard to allow Stripe to manage subscription payments. (Their policies can be viewed here and here).

Third Parties

Whilst we’d love to do everything ourselves, sadly we sometimes have to work with other companies! These have largely been covered above, but we also use Big Web Warehouse to pack and ship our boxes. In order to do this, we provide them with address labels to attach to boxes to ship – these are removed from the system as soon as possible.

Delivery Locations

All orders are subject to product availability. If we are unable to fulfil an order or an item is not in stock at the time you place your order, we will notify you and refund you the total amount of your order, using the original method of payment.

Delivery Time

Delivery times are estimates and commence from the date of shipping, rather than the date of order. Delivery times are to be used as a guide only and are subject to the acceptance and approval of your order. Unless there are exceptional circumstances, we make every effort to fulfil all orders on or before the same day every month (15th). Business day means Monday to Friday. Please note we do not ship on weekends or holidays.

Legal Basis for Processing Data

The legal basis for processing data in the case of Mailing List is Consent. We don’t collect your email data unless you specifically ask us to, and we don’t email you unless you’ve ticked the box.

The legal basis for processing data in the case of Subscriber Sign Ups is Contract. Without your address and payment information, we are unable to provide our service.

Access to your personal information

You are entitled to view, amend, or delete the personal information that we hold. Email your request to

Use of our Website

We plan to review this policy annually, or whenever there are large changes made to it, such as working with new third parties.

Changes to this Privacy Notice

We plan to review this policy annually, or whenever there are large changes made to it, such as working with new third parties.