The Pembrokeshire Chocolate Co.
Operated by Griffiths Francis Group Ltd
Last updated: 10 October 2025
Griffiths Francis Group Ltd (“we”, “us”, “our”), trading as The Pembrokeshire Chocolate Co., is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and protect your information in line with the UK General Data Protection Regulation (UK GDPR).
Legal entity: Griffiths Francis Group Ltd
Trading name: The Pembrokeshire Chocolate Co.
Registered office: Unit 3, Cartlett Office Park, Haverfordwest, SA61 2LH
Email: hello@pembrokeshirechocolate.co.uk
Role: For the purposes of UK GDPR, we are the “data controller” of your personal data.
We may collect and process the following categories of data:
Identity and contact details: name, email address, postal address, phone number.
Order details: products purchased, delivery address, billing address, and payment details (processed securely by third-party payment providers, we do not store card details).
Newsletter details: your email address and marketing preferences when you subscribe.
Technical information: IP address, browser type, device type, and website usage data collected through cookies or analytics tools.
We will only process your personal data where we have a legal basis under UK GDPR:
To fulfil a contract: to process and deliver your orders, handle payments, and provide customer service.
With your consent: to send you our newsletter and marketing communications (you can withdraw consent at any time).
For our legitimate interests: to improve our website, understand customer preferences, and maintain business records.
To comply with legal obligations: to meet accounting, tax, and regulatory requirements.
We do not sell your data. We may share your data with:
Service providers: including payment processors, IT providers, website hosts, and delivery companies.
Professional advisers: such as accountants or auditors.
Authorities: where we are legally required to do so.
All third parties we work with are required to respect the security of your data and process it in compliance with UK GDPR.
We may use service providers (such as email or website hosting services) located outside the UK. Where this occurs, we ensure appropriate safeguards are in place, for example the use of the UK’s International Data Transfer Agreement or other lawful mechanisms.
We will keep your personal data only as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements.
Order information is typically retained for 6 years to comply with tax and accounting laws.
Marketing data is kept until you unsubscribe or withdraw your consent.
Under UK GDPR, you have the following rights:
To access the personal data we hold about you.
To request correction of your personal data if it is inaccurate or incomplete.
To request erasure of your personal data where there is no good reason for us to continue processing it.
To object to processing based on legitimate interests.
To withdraw consent to marketing communications at any time.
To request restriction of processing or data portability in certain circumstances.
If you wish to exercise any of these rights, please contact us at hello@pembrokeshirechocolate.co.uk.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk).
Our website uses cookies and similar technologies to improve your experience, analyse site traffic, and support basic website functionality. You can set your browser to refuse all or some cookies, but parts of the site may not work properly if you do.
If you have any questions about this policy or how we handle your personal data, please contact us:
Griffiths Francis Group Ltd
Unit 3, Cartlett Office Park
Haverfordwest, SA61 2LH
Email: hello@pembrokeshirechocolate.co.uk
