Privacy Policy

Last updated: 14/09/2025

Bitter & Twisted (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit bitterandtwisted.je (the “Site”) in accordance with the General Data Protection Regulation (GDPR).

1. Who We Are (Data Controller)

The Data Controller responsible for your personal data is:

Bitter & Twisted

Email: info@bitterandtwisted.je

Address: 5 Brooklyn Apartments, La Route De St Aubin, St Helier. JE2 3LL

If you have any questions about this Privacy Policy or your rights, you can contact us using the details above.

2. Information We Collect

We may collect the following types of information:

  • Personal Information: name, email address, phone number, billing/shipping address, payment details (if you provide them).

  • Technical Information: IP address, browser type, operating system, referring URLs, device information.

  • Cookies and Tracking Data: information collected through cookies, pixels, and similar technologies (see Section 7).

3. Lawful Basis for Processing

We process your personal data only when we have a lawful basis under GDPR, including:

  • Consent: when you give us permission (e.g., for marketing emails or cookies).

  • Contract: when processing is necessary to provide our services or fulfil a purchase.

  • Legal obligation: when we must comply with the law.

  • Legitimate interest: when it is necessary for our business and not overridden by your rights (e.g., improving services, preventing fraud).

4. How We Use Your Information

We may use your information to:

  • Provide, operate, and maintain our services.

  • Process orders and payments.

  • Respond to your requests and communicate with you.

  • Send you updates, promotions, or newsletters (if you consent).

  • Improve website functionality and user experience.

  • Comply with legal obligations.

5. How We Share Your Information

We do not sell your personal data. We may share it with:

Service providers: such as hosting providers, payment processors, analytics providers, and email services.

  • Authorities: when required by law or to protect our legal rights.

  • Business transfers: in case of a merger, acquisition, or sale of assets.

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. After this period, your personal data will be securely deleted or anonymized.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable essential site functions.

  • Analyze site traffic and usage.

  • Personalize content or ads (if applicable).

When you first visit our site, you will see a cookie banner asking for your consent to non-essential cookies. You can manage your cookie preferences at any time through your browser settings or our cookie management tool.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access – to request a copy of the personal data we hold about you.

  • Right of rectification – to request corrections to inaccurate or incomplete data.

  • Right to erasure – to request deletion of your personal data (“right to be forgotten”).

  • Right to restrict processing – to request limits on how we use your data.

  • Right to object – to object to certain processing activities (e.g., marketing).

  • Right to data portability – to request transfer of your data to another service provider.

  • Right to withdraw consent – if processing is based on your consent, you can withdraw it at any time.

To exercise these rights, contact us at info@bitterandtwisted.je.

You also have the right to lodge a complaint with your local Data Protection Authority if you believe we are not complying with data protection laws.

9. Data Security

We use appropriate technical and organizational measures to protect your personal data. However, no method of online transmission or storage is completely secure.

10. Third-Party Links

Our Site may contain links to external websites. We are not responsible for the privacy practices of those websites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.