PRIVACY POLICY

Last updated: 2026-02-08

This Privacy & Cookie Policy explains how we collect, use, share, and protect personal data when you visit datgummies.com, create an account, submit forms, or place orders.

1) Data Controller

Controller: DAT SUPPLY LTD
Address: 128 City Road, London, United Kingdom, EC1V 2NX
Company Number: 16756227
Contact (privacy): privacy@datgummies.com

Operational entity (processing/fulfilment support): Sublime e Otimista - Unipessoal Lda
Address: Avenida Doutor Fernando Raimundo Rodrigues, Nº 1525, 3885-412 Esmoriz, Ovar, Aveiro, Portugal
NIF: 518587649

Depending on the service requested, Sublime e Otimista - Unipessoal Lda may process personal data on behalf of DAT SUPPLY LTD (for example, to support fulfilment, logistics, or operational communications).

2) What data we collect

A) Data you provide

  • Account & contact: name, email, phone, company name, billing/shipping address, VAT/NIF (if provided), country, language

  • B2B inquiries/forms: information you submit (e.g., product interest, volumes, target market)

  • Orders & payments: order items, order history, shipping details, invoices
    (Payment card details are processed by payment providers and are not stored by us.)

  • Support communications: messages via email, forms, or WhatsApp (if you contact us)

B) Data collected automatically

  • Device/usage: IP address, browser/device type, pages visited, timestamps, referrer URL

  • Cookies & similar technologies: cookie identifiers and related tracking data (see Cookies section)

3) Why we process data (purposes)

We process personal data to:

  • Provide and operate the website

  • Create and manage user accounts

  • Process orders, payments, and shipping

  • Respond to inquiries and provide customer support

  • Send service communications (order confirmations, account/security messages)

  • Send marketing communications where permitted (newsletter, updates)

  • Prevent fraud and secure our services

  • Analyze website performance and improve user experience

  • Comply with legal obligations (accounting, tax, compliance)

4) Legal bases (GDPR)

We rely on one or more of the following legal bases:

  • Contract (Art. 6(1)(b)): account creation, orders, delivery, customer service

  • Legitimate interests (Art. 6(1)(f)): security, fraud prevention, analytics, improving services, B2B relationship management
    (You may object where applicable.)

  • Consent (Art. 6(1)(a)): marketing where required; non-essential cookies/trackers where required

  • Legal obligation (Art. 6(1)(c)): tax, accounting, regulatory duties

5) How we share data (processors & partners)

We share personal data only as necessary to provide our services. Typical recipients include:

E-commerce & hosting

  • Shopify (website hosting, account and order management)

Email & marketing automation

  • Klaviyo (lead capture from forms, email communications, segmentation and automation)

Payments

  • Payment processors used at checkout (depending on your payment method)

Shipping & logistics

  • Carriers and logistics partners used to deliver orders (e.g., DHL/DPD/UPS or other providers we select)

Operational processing

  • Sublime e Otimista - Unipessoal Lda may process data to support operational steps such as fulfilment and logistics coordination.

Analytics & advertising (only if enabled)

  • Analytics and advertising tools (e.g., Google Analytics / Google Ads / Meta Pixel), where configured
    (These typically require cookie consent depending on your location.)

We do not sell personal data.

6) International data transfers

Some service providers may process data outside the European Economic Area (EEA). Where applicable, we use safeguards such as:

  • Adequacy decisions, and/or

  • Standard Contractual Clauses (SCCs), and/or

  • Other lawful transfer mechanisms

7) Data retention

We keep personal data only as long as necessary:

  • Account data: while your account remains active and for a reasonable period thereafter unless deletion is requested (and permitted)

  • Order & invoice data: for the period required by tax/accounting laws

  • Support communications: as needed to manage and resolve requests

  • Marketing data: until you unsubscribe or withdraw consent

  • Analytics data: based on tool configuration and retention settings

8) Your rights (EEA/UK)

Depending on your location, you may have the right to:

  • Access your data

  • Correct inaccurate data

  • Delete your data (where applicable)

  • Restrict processing

  • Object to processing (especially legitimate interests)

  • Data portability

  • Withdraw consent (where processing is based on consent)

To exercise your rights, contact: privacy@datgummies.com.
You also have the right to lodge a complaint with your supervisory authority.

9) Marketing communications

If you opt in (or where otherwise legally permitted), we may send marketing emails.
You can unsubscribe at any time using the unsubscribe link in the email.

Service emails (order confirmations, account/security notices) are not marketing and cannot be unsubscribed from.

10) Cookies & tracking technologies

We use cookies and similar technologies to:

  • Enable core site functionality (login, cart, checkout)

  • Remember preferences (e.g., language/region)

  • Measure performance and improve the website

  • Support advertising/retargeting (only where enabled and permitted)

Types of cookies

  • Strictly necessary: required for essential site functions (always active)

  • Preferences: store settings (may require consent depending on jurisdiction)

  • Analytics: measure website usage (consent where required)

  • Marketing: advertising/retargeting (consent where required)

Cookie consent

Where required, non-essential cookies are set only after you provide consent via our cookie banner/settings. You can change preferences at any time via Cookie Settings (if available on the site) or in your browser settings. Blocking necessary cookies may impact website functionality.

11) Security

We apply reasonable technical and organizational measures to protect personal data. No online system is completely secure, but we work to minimize risk.

12) Children

Our services are intended for business users and adults. We do not knowingly collect personal data from children.

13) Changes to this policy

We may update this policy from time to time. The “Last updated” date will reflect the latest version. Material changes may be communicated on the website or by email where appropriate.

14) Contact

Privacy requests: privacy@datgummies.com

Business contact: geral@datgummies.com