Privacy policy

Last updated: 1 July 2026

Made Uncommon Limited (“Made Uncommon”, “we”, “our” or “us”) is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store, share and protect your personal information when you:

• visit any website operated by Made Uncommon;
• create an online account;
• purchase products;
• apply for a wholesale or trade account;
• subscribe to marketing communications;
• enter competitions or promotions;
• contact our customer service team; or
• otherwise interact with Made Uncommon.

This Privacy Policy applies to all websites, online stores, brands and services operated by Made Uncommon Limited unless a separate privacy policy expressly states otherwise.

1. Company Information

Data Controller
Made Uncommon Limited
Company Number: 09599097
VAT Registration Number: GB 218 9623 84

Registered Office
20-22 Wenlock Road
London
N1 7GU
United Kingdom

Principal Place of Business, Customer Services and Returns
Made Uncommon
Port Edgar Marina
Shore Road
South Queensferry
EH30 9SQ
United Kingdom

Website: https://www.madeuncommon.co
Email: hello@madeuncommon.co

For the purposes of UK data protection legislation, Made Uncommon Limited is the Data Controller responsible for the personal information collected through our websites, online stores and related services.

2. About Made Uncommon

Made Uncommon Limited owns, operates and develops a portfolio of consumer brands.

Our portfolio currently includes, but is not limited to:

• COCO Chocolatier
• Love Cocoa
• Seed & Bean
• H!P Chocolate
• OTHERLY
• UP-UP Chocolate
• Raw Wax

From time to time we may:

• acquire additional brands;
• launch new brands;
• discontinue existing brands;
• operate websites under different trading names;
• manufacture products on behalf of third parties;
• distribute products owned by third parties;
• sell products owned by third parties; and
• otherwise expand or change our product offering.

Unless expressly stated otherwise, references throughout this Privacy Policy to “Made Uncommon”, “our brands”, “our portfolio” or “our products” include our current brands, any brands or products we acquire, launch or operate in the future, and any third-party products or services we offer through our websites.

3. Shared Customer Platform

Made Uncommon operates a shared customer platform across its portfolio of brands.

When you:

• create an account;
• place an order;
• subscribe to a newsletter;
• enter a competition;
• request information;
• contact customer services; or
• otherwise provide personal information,

that information is collected by Made Uncommon Limited and forms part of your overall customer relationship with Made Uncommon, regardless of which Made Uncommon brand or website you first interacted with.

For example, if you first subscribe through COCO Chocolatier and later purchase from Seed & Bean or Love Cocoa using the same email address, we may recognise you as the same customer across our portfolio.

This enables us to:

• operate a single customer account across multiple brands;
• recognise returning customers;
• improve customer service;
• manage orders, warranties and returns;
• reduce duplicate records;
• personalise your shopping experience;
• recommend relevant products, brands and services across our portfolio; and
• provide a consistent experience across all Made Uncommon brands.

4. Marketing Across Our Portfolio

Where you have consented to receive marketing communications, your marketing preferences apply across the Made Uncommon portfolio rather than solely to the individual brand through which you first subscribed.

Where you have provided consent, or where applicable law otherwise permits, Made Uncommon Limited may send marketing communications relating to:

• any current Made Uncommon brand;
• future brands and websites that become part of our portfolio;
• products manufactured by us;
• products sold by us on behalf of third parties;
• new product launches;
• competitions;
• promotions;
• collaborations;
• educational content;
• surveys;
• events; and
• other information we reasonably believe may be relevant to you.

You may unsubscribe or update your marketing preferences at any time by:

• clicking the unsubscribe link contained within our emails;
• updating your account preferences where available; or
• contacting us at hello@madeuncommon.co.

Opting out of marketing communications will not prevent us from sending important non-marketing communications where necessary, including those relating to:

• orders;
• deliveries;
• returns;
• customer accounts;
• trade accounts;
• payment queries;
• product safety notifications; or
• customer service enquiries.

5. Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

Identity Information

• Name
• Username
• Date of birth (where required)
• Account information

Contact Information

• Email address
• Telephone number
• Billing address
• Delivery address

Transaction Information

• Orders placed
• Products purchased
• Payment method
• Payment status
• Returns
• Refunds
• Credit notes
• Gift card activity

Please note that payment card details are processed securely by our payment providers. Made Uncommon Limited does not store your full payment card details.

Account Information

• Encrypted password
• Login history
• Saved addresses
• Wishlist information
• Account preferences

Technical Information

• IP address
• Browser type
• Device type
• Operating system
• Time zone
• Cookie identifiers
• Diagnostic information

Usage Information

We collect information about how you use our websites, including:

• pages viewed;
• products viewed;
• searches performed;
• navigation behaviour;
• referring websites;
• products added to your basket;
• purchases;
• abandoned baskets; and
• interactions with website features.

Communications

We retain records of communications including:

• emails;
• web forms;
• customer service enquiries;
• live chat;
• trade enquiries;
• wholesale applications; and
• correspondence relating to your account.

Marketing Information

This may include:

• marketing preferences;
• email engagement;
• campaign interactions;
• competition entries;
• survey responses; and
• communication preferences.

Business Information

Where you apply for or maintain a wholesale or trade account, we may collect:

• company name;
• company registration number;
• VAT registration number;
• registered office;
• trading address;
• company website;
• industry sector;
• buyer details;
• payment terms;
• credit information;
• purchase history; and
• other information reasonably required to administer your trade account.

6. Information We Receive From Third Parties

We may receive information about you from trusted third-party organisations, including:

• Shopify;
• payment providers;
• delivery companies;
• fraud prevention providers;
• advertising partners;
• analytics providers;
• social media platforms;
• customer service providers;
• wholesale marketplaces;
• retailers;
• trade partners; and
• public business registers.

Where permitted by law, we may combine this information with information already held by Made Uncommon Limited in order to:

• verify customer information;
• improve customer service;
• prevent fraud;
• administer customer and trade accounts;
• personalise your experience;
• improve our products and services; and
• better understand how customers interact with our brands and websites.

7. Why We Use Your Information

We only process personal information where we have identified an appropriate lawful basis under UK data protection legislation.

Depending on the purpose for which we use your personal information, one or more lawful bases may apply.

Performance of a Contract

We process personal information where necessary to:

• fulfil your order;
• process payment;
• arrange delivery;
• administer your account;
• manage returns;
• provide customer support; and
• fulfil our contractual obligations.

Legal Obligations

We process personal information where required to comply with applicable law, including:

• taxation legislation;
• accounting requirements;
• consumer protection legislation;
• product safety obligations;
• fraud prevention and financial crime obligations; and
• regulatory requirements.

Legitimate Interests

Where appropriate, we process personal information because it is in the legitimate interests of Made Uncommon Limited to:

• improve our websites;
• improve website functionality;
• improve our products and services;
• prevent fraud;
• secure our systems;
• analyse purchasing behaviour;
• administer customer and trade accounts;
• provide customer support;
• understand customer preferences;
• improve marketing effectiveness;
• develop new products;
• operate, develop and grow our portfolio of brands; and
• manage relationships across our business.

Whenever we rely on legitimate interests, we carefully consider and balance our legitimate business interests against your rights, freedoms and interests.

Consent

Where required by law, we rely on your consent, including for:

• sending certain marketing communications; and
• the use of non-essential cookies and similar technologies.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before your consent was withdrawn.

8. Cookies and Similar Technologies

Our websites use cookies and similar technologies to improve your browsing experience, remember your preferences, analyse website performance and deliver more relevant advertising.

Cookies are small text files stored on your device when you visit a website.

We use four categories of cookies.

Strictly Necessary Cookies

These cookies are essential for the operation of our websites. Without them, certain features of our websites cannot function correctly.

Examples include:

• shopping basket functionality;
• customer logins;
• security;
• fraud prevention;
• checkout functionality;
• payment processing; and
• load balancing.

Performance and Analytics Cookies

These cookies help us understand how visitors use our websites so that we can continually improve them.

They may collect information including:

• pages viewed;
• products viewed;
• click paths;
• session duration;
• browser type;
• device type; and
• approximate location.

Where possible, this information is aggregated or pseudonymised.

Functional Cookies

These cookies remember choices you make, including:

• language;
• currency;
• recently viewed products;
• login preferences;
• saved baskets; and
• account preferences.

Marketing Cookies

These cookies help us measure the effectiveness of our advertising, personalise marketing communications and show more relevant advertisements across websites, search engines and social media platforms.

Managing Cookies

You may manage your cookie preferences at any time through our cookie banner or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our websites.

9. Shopify

Our online stores are hosted by Shopify Inc.

Shopify provides the ecommerce platform through which we operate our websites, customer accounts, online checkout and certain customer account functionality.

When you purchase products from us or create an account, certain personal information is processed and securely stored within Shopify’s infrastructure on our behalf.

Shopify acts as one of our data processors and processes personal information in accordance with its own privacy and security standards.

For further information about how Shopify processes personal information, please refer to Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy

10. Payment Providers

Payments made through our websites are processed securely using PCI DSS-compliant payment providers.

Depending on the payment method you choose, we may use providers including:

• Shopify Payments;
• Shop Pay;
• PayPal;
• Apple Pay;
• Google Pay;
• Klarna;
• major credit and debit card providers; and
• other payment providers introduced from time to time.

Made Uncommon Limited does not store your full payment card details on its own systems.

Payment information is encrypted and processed directly by our payment providers in accordance with applicable security standards and their own privacy policies.

11. Delivery Partners

To deliver your orders, we share relevant delivery information with trusted logistics providers.

This information may include:

• your name;
• delivery address;
• telephone number (where required);
• email address (where required); and
• order reference.

Delivery partners may include:

• Royal Mail;
• DPD;
• DHL;
• UPS;
• FedEx;
• Evri; and
• other logistics providers used from time to time.

We only share the personal information reasonably necessary to fulfil, track and, where applicable, return your order.

Our delivery partners process your personal information solely for the purposes of providing delivery and related logistics services on our behalf.

12. Marketing Platforms

To operate our marketing activities, we may use trusted third-party marketing and advertising platforms, including:

• Omnisend;
• Klaviyo;
• Meta;
• Google Ads;
• Google Analytics;
• Google Tag Manager;
• Microsoft Advertising;
• LinkedIn;
• Pinterest;
• TikTok; and
• other marketing platforms introduced from time to time.

These providers process personal information on our behalf under appropriate contractual safeguards and only for the purposes of providing marketing, analytics, advertising and customer communication services.

Where required by law, we enter into appropriate data processing agreements with these providers to help ensure your personal information remains protected.

13. Website Analytics

We use website analytics tools to help us understand how visitors use our websites and to improve the performance, usability and effectiveness of our online services.

These tools help us understand:

• which pages are most popular;
• how visitors find our websites;
• which marketing campaigns perform best;
• how customers navigate our websites;
• how our websites perform across different devices and browsers;
• where improvements can be made; and
• overall website performance.

Where reasonably possible, analytics information is aggregated or pseudonymised before being analysed.

Analytics information is used to help improve our websites, products, services and customer experience. We do not use analytics data to identify individual visitors unless necessary for security, fraud prevention or as otherwise permitted by law.

14. Advertising

We may use personal information to:

• measure the effectiveness of our advertising;
• build audience segments;
• personalise advertising and marketing communications;
• suppress existing customers from customer acquisition campaigns;
• improve marketing efficiency;
• understand customer interests and preferences; and
• measure the effectiveness of our websites and marketing activities.

Advertising platforms may use cookies and similar technologies to deliver these services, subject to your cookie preferences and applicable law.

You can manage many advertising preferences through our cookie banner, your browser settings or your social media account settings.

Where required by law, we will only use advertising cookies and similar technologies with your consent.

15. Customer Profiles

Made Uncommon Limited maintains a consolidated customer database across its portfolio of brands.

Where permitted by law, we may combine personal information collected through our various brands into a single customer profile where we reasonably believe the information relates to the same individual, for example through the use of a shared email address or other account identifiers.

Maintaining a consolidated customer profile enables us to:

• recognise returning customers across our brands;
• operate a shared customer account across our portfolio where available;
• reduce duplicate customer records;
• improve customer service;
• administer orders, returns and customer enquiries;
• understand purchasing behaviour across our portfolio;
• recommend relevant products, brands and services;
• personalise communications and your shopping experience; and
• provide a more consistent customer experience across Made Uncommon.

We maintain this consolidated customer database to help us operate our portfolio efficiently and provide a better customer experience across all Made Uncommon brands.

We do not sell or rent your personal information or customer profiles to third parties.

16. Automated Decision Making

We may use automated systems and technologies to assist with:

• fraud detection;
• payment verification;
• abuse prevention;
• product recommendations;
• marketing audience segmentation;
• website personalisation; and
• improving the relevance of content, products and communications.

These systems help us improve security, operate our websites efficiently and provide a better customer experience.

We do not make decisions based solely on automated processing that produce legal effects, or similarly significant effects, concerning you without appropriate safeguards or where prohibited by applicable law.

Where required by law, you have the right to request human intervention, express your point of view and challenge decisions made solely through automated processing.

17. Sharing Your Information

We do not sell or rent your personal information to third parties.

We only share your personal information where necessary with carefully selected third parties, including:

• companies within the Made Uncommon group where necessary to operate our business;
• payment providers;
• delivery companies;
• website hosting providers;
• ecommerce platforms;
• email marketing providers;
• cloud infrastructure providers;
• customer service platforms;
• fraud prevention providers;
• analytics providers;
• advertising platforms;
• professional advisers, including lawyers, accountants, auditors and insurers; and
• regulators or law enforcement authorities where required by law.

All organisations processing personal information on our behalf are required to maintain appropriate confidentiality, security and data protection standards.

Where personal information is transferred outside the United Kingdom, we ensure that appropriate legal safeguards are in place, such as the UK International Data Transfer Agreement, approved contractual clauses or other recognised transfer mechanisms where required by applicable law.

18. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy and to comply with our legal, regulatory and contractual obligations.

The length of time we retain personal information depends on factors including the nature of the information, the purpose for which it was collected, our legal obligations and any legitimate business requirements.

Examples of information we may retain include:

• customer account information;
• order history;
• customer correspondence;
• warranty records;
• accounting records;
• tax records;
• fraud prevention records;
• trade account records; and
• information required to comply with applicable legal or regulatory obligations.

When personal information is no longer required, we securely delete, anonymise or otherwise dispose of it in accordance with our internal data retention procedures and applicable data protection legislation.

19. Data Security

We take the security of your personal information seriously and maintain appropriate technical and organisational measures designed to protect it against unauthorised or unlawful access, disclosure, alteration, loss or destruction.

These measures may include, where appropriate:

• encryption of sensitive data;
• secure payment processing;
• firewalls and network security;
• access controls based on business need;
• multi-factor authentication where appropriate;
• regular software updates and security patching;
• staff training on data protection and information security; and
• ongoing monitoring, testing and review of our systems.

Although we take reasonable steps to protect personal information, no method of transmitting data over the internet or storing electronic information is completely secure. Accordingly, we cannot guarantee absolute security.

We regularly review our technical and organisational security measures to help ensure they remain appropriate to the nature of the personal information we process and the risks associated with its processing.

20. Personal Data Breaches

If we become aware of a personal data breach affecting personal information under our control, we will investigate the incident promptly and take appropriate steps to contain the breach, assess its impact and minimise any potential harm.

Where required by applicable law, we will notify:

• the Information Commissioner’s Office (ICO); and
• affected individuals,

within the timescales prescribed by UK data protection legislation.

Following any personal data breach, we will review the circumstances surrounding the incident and, where appropriate, implement measures designed to reduce the likelihood of similar incidents occurring in the future.

21. Your Rights

Under UK data protection legislation, you have the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request deletion of your personal information where appropriate;
• request restriction of the processing of your personal information;
• object to certain processing activities;
• withdraw your consent at any time where processing is based on your consent;
• request the transfer of your personal information to another organisation, where technically feasible (data portability);
• object to the use of your personal information for direct marketing at any time; and
• lodge a complaint with the Information Commissioner’s Office (ICO).

You may exercise any of these rights by contacting us using the contact details set out in this Privacy Policy.

To protect your personal information, we may request reasonable proof of identity before responding to certain requests.

We will respond to all valid requests within the timescales required by applicable data protection legislation. If we are unable to fulfil your request, we will explain the reasons, subject to any legal restrictions.

22. Marketing Preferences

You may update your marketing preferences or unsubscribe from our marketing communications at any time by:

• clicking the unsubscribe link contained within any marketing email;
• updating your account preferences, where available;
• contacting us directly; or
• replying STOP to SMS communications, where applicable.

Please note that opting out of marketing communications will not prevent us from sending important non-marketing communications relating to:

• orders;
• deliveries;
• returns and refunds;
• account security;
• payment queries;
• wholesale or trade accounts;
• product recalls or safety notices;
• changes to our terms, policies or services where appropriate; or
• other transactional or legally required communications.

We will continue to respect your marketing preferences across the Made Uncommon portfolio unless you choose to update them.

23. Children’s Privacy

Our websites are intended for use by adults.

We do not knowingly collect personal information from children under the age of 13 without appropriate parental or guardian consent.

If we become aware that we have collected personal information from a child in circumstances where such consent was required, we will take reasonable steps to delete that information promptly or otherwise comply with applicable legal requirements.

If you believe that a child has provided us with personal information without appropriate consent, please contact us at hello@madeuncommon.co.

24. Trade (B2B) Customers

Where you apply for, or operate, a wholesale or trade account with Made Uncommon, we may collect additional business information, including:

• company name;
• registered company number;
• VAT registration number;
• registered and trading addresses;
• buyer and purchasing contacts;
• finance and accounts contacts;
• purchase history;
• agreed payment terms;
• payment history;
• account status;
• credit information where applicable; and
• communications relating to your account.

We process this information for purposes including:

• administering wholesale and trade accounts;
• processing and fulfilling orders;
• managing payment terms and credit facilities;
• carrying out credit assessments where appropriate;
• fraud prevention;
• customer support;
• legal and regulatory compliance;
• maintaining our business relationship; and
• improving the products and services we provide to trade customers.

Trade customer information may be linked with our wider customer database where appropriate to provide a consistent customer experience, improve account management and administer relationships across the Made Uncommon portfolio.

25. Business Changes and Acquisitions

Made Uncommon Limited regularly develops, acquires, operates and, where appropriate, reorganises or disposes of consumer brands, businesses and related assets.

Accordingly, personal information may be transferred between companies within the Made Uncommon group where reasonably necessary to:

• provide products and services;
• administer customer and trade accounts;
• operate our brands and websites;
• fulfil customer orders;
• provide customer support;
• manage our business operations; or
• comply with legal and regulatory obligations,

in accordance with applicable data protection legislation.

If ownership of all or part of our business, brands or assets changes, relevant personal information may form part of the transferred business assets, subject to appropriate legal safeguards and applicable law.

Where required by law, we will notify affected individuals of any material changes affecting the processing of their personal information.

26. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes in applicable laws or regulations;
• changes to our products or services;
• technological developments;
• changes to our business structure;
• acquisitions, disposals or reorganisation of brands or businesses;
• changes to the third-party providers we use; or
• improvements to our privacy and data protection practices.

The latest version of this Privacy Policy will always be published on our websites and will take effect from the date of publication.

Where we make material changes that significantly affect how we process your personal information, we will take reasonable steps to bring those changes to your attention, for example by displaying a prominent notice on our websites or, where appropriate, contacting you directly.

27. Complaints

If you have any questions or concerns about this Privacy Policy or the way we process your personal information, we encourage you to contact us first. We will always aim to resolve your concerns fairly, promptly and transparently.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority responsible for upholding information rights.

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Website: https://ico.org.uk
Telephone: 0303 123 1113

Making a complaint to the ICO does not affect any other legal rights or remedies that may be available to you.

28. Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your privacy rights, please contact:

Made Uncommon Limited
Company Number: 09599097
VAT Registration Number: GB 218 9623 84

Registered Office
20-22 Wenlock Road
London
N1 7GU
United Kingdom

Principal Place of Business, Customer Services and Returns
Made Uncommon
Port Edgar Marina
Shore Road
South Queensferry
EH30 9SQ
United Kingdom

Website: https://www.madeuncommon.co
Email: hello@madeuncommon.co

29. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of Scotland.

Any dispute arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the Scottish courts, except where mandatory consumer protection legislation provides otherwise.

Nothing in this Privacy Policy limits or affects any statutory rights available to consumers under applicable law.