Privacy policy
This policy explains what personal information CardChef collects, why, who we share it with, and the choices you have. We've kept it as short and plain as we can.
Who we are
CardChef is run by CardChef Ltd, a company registered in England and Wales (company number 14591521). Our registered office is 71 Shelton Street, Covent Garden, London, WC2H 9JQ.
We're the "controller" of your personal information under UK data protection law. If you have any questions about this policy or your information, email hello@cardchef.com.
What we collect
When you place an order
Checkout is handled by Stripe. When you order, Stripe collects your name, email address, delivery address and payment details, and shares the order details with us (but never your full card number). If you give a phone number, we receive that too.
When you sign up by email
If you ask for a free delivery code, we collect your email address. We create a code that's yours alone and send it to you by email.
When you browse the site
We use Vercel Analytics to count visits and see which pages are popular. It doesn't use cookies and doesn't identify you.
If you accept cookies, we also use:
- Meta Pixel and TikTok Pixel, to measure how our ads on Facebook, Instagram and TikTok perform and to show our ads to people likely to be interested
- Google tag, to measure our Google ads
- Contentsquare, to understand how people use the site (for example, where they click and how far they scroll), so we can improve it
With your consent, we also send these events (such as viewing a product, starting checkout, signing up or buying) directly from our server to Meta and TikTok. Where we include your email address, it's scrambled (hashed) before it leaves us, so it can be matched to an account without being sent in readable form.
We also remember in your browser how you first found us (for example an ad, a search or one of our emails) and pass that along with your order, so we know which of our marketing works.
How we use it
- To fulfil your order: taking payment, posting your order, and contacting you about it. We do this to perform our contract with you.
- To send you emails: if you sign up for a code or buy from us, we send a short series of emails (your code, tips for using your cards, and offers on our collections) and occasional news. You can unsubscribe at any time using the link in every email. For customers, we rely on our legitimate interest in telling you about similar products; for sign-ups, on your consent.
- To measure and improve our marketing and the site: using the cookies and tools above, only if you've accepted them.
- To meet our legal obligations: for example, keeping accounting records.
We share information only with the companies that help us run CardChef:
- Stripe (payments)
- Kit (our email service)
- Royal Mail (to deliver your order)
- Vercel (hosting this website, and privacy-friendly analytics)
- Meta, TikTok, Google and Contentsquare (advertising and analytics, only with your consent)
We never sell your personal information.
Some of these companies are based in, or store data in, the United States or elsewhere outside the UK. Where that happens, the transfer is protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK's International Data Transfer Addendum.
We use one essential cookie, which remembers whether you accepted or rejected cookies. Everything else (the Meta, TikTok, Google and Contentsquare tags) only loads if you click Accept on the cookie banner.
To change your mind, clear the cookies for cardchef.com in your browser and the banner will appear again on your next visit.
How long we keep it
- Order records: six years, because UK tax law requires it.
- Email list: until you unsubscribe. After that, we keep only what's needed to make sure we don't email you again.
- Advertising and analytics data: for as long as each provider's own settings and policies allow.
Your rights
Under UK data protection law, you can ask us to:
- give you a copy of the information we hold about you
- correct anything that's wrong
- delete your information
- restrict or object to how we use it
- send your information to you or another company in a portable format
Where we rely on your consent, you can withdraw it at any time. To make any of these requests, email hello@cardchef.com. We'll reply within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first, though.
Changes to this policy
If we change how we use your information, we'll update this page. This version was last updated on 24 October 2026.