Privacy & GDPR Policy

1. Introduction

Spice & Light is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, store and protect your personal data when you visit our website www.spiceandlight.co.uk or contact us.

2. What Data We Collect

We may collect the following personal data:

  • Contact details (name, email, phone) when you inquire about our services.
  • Website usage data (IP address, browser type, pages visited).
  • Cookies to improve your experience (you can disable these in your browser settings).

3. How We Use Your Data

We process your data based on legitimate interests (e.g., responding to enquiries) or your consent (e.g., marketing emails). Your data is used to:

  • Respond to enquiries and provide our services.
  • Improve website functionality and user experience.
  • Send occasional updates (only if you opt-in).

4. Data Protection & Security

We take reasonable steps to protect your personal data and do not sell or share it with third parties without your consent. Any third-party tools (e.g., Google Analytics) process data under their own privacy policies.

5. Your Rights Under GDPR

You have the right to:

  • Access the data we hold about you.
  • Request corrections or deletion of your data.
  • Withdraw consent for marketing at any time.
  • Request data transfer to another provider.

To exercise your rights, contact us at:
📧 anusha@spiceandlight.co.uk

6. Data Retention

We keep personal data only as long as necessary for business or legal purposes. Unnecessary data is securely deleted.

7. Updates to This Policy

This policy may be updated from time to time. Please check back periodically for any changes.