Privacy policy

Last updated: 25 October 2026.

Who we are and how to contact us

The Edible Gang Limited, trading as Scoff Paper, is responsible for the personal information we collect for our business. We are registered in England and Wales, company number 12804646. Our registered office and contact address is Unit 19 Roundhouse Court, Barnes Wallis Way, Buckshaw Village, Chorley, England, PR7 7JN. Contact hello@scoffpaper.com about privacy or write to us at that address.

This notice covers our website, customer accounts, orders, enquiries, marketing and wholesale applications. It explains our use of personal information under UK data protection law and, where applicable, other data protection laws.

Information we collect

• Contact and account details, such as your name, email, telephone number, delivery and billing addresses and account information.
• Order, payment-status, transaction, delivery and returns information. Payment providers process card details securely; please do not send card numbers or security codes to us by email.
• Personalisation you submit, including messages, names and images. Please provide only information and images you have permission to use.
• Details you choose to give about your dog, such as their name, breed, birthday, age, gender and Gotcha Day, linked to your customer or subscriber profile. These are used for relevant greetings and reminders, not as your own date of birth.
• Marketing consent, preferences, unsubscribe records and, where enabled and permitted, email interactions such as opens and clicks.
• Enquiries, complaints, reviews, proof of purchase and relevant evidence supplied when resolving an order problem.
• Wholesale application details, including business and contact information.
• Device and website-use information, such as IP address, browser, pages viewed, products viewed, basket activity, referral source and cookie identifiers, subject to applicable privacy choices.

We obtain information directly from you, through your use of our store and from the service providers involved in payments, fraud checks and delivery. Required checkout details are needed to process and deliver your order; optional marketing and dog-profile information is not required to buy from us.

How and why we use information

• Orders and customer accounts: to take payment, personalise goods, fulfil orders, arrange delivery and provide customer service. Our lawful basis is performing our contract with you or taking steps at your request before a contract.
• Legal records and obligations: to keep accounting and tax records and respond to lawful requests. Our lawful basis is compliance with legal obligations.
• Security, fraud prevention and disputes: to protect the store, investigate genuine and suspected misuse, verify claims and establish or defend legal rights. We rely on our legitimate interests in running and protecting our business, balanced against your rights, and legal obligations where applicable.
• Enquiries and wholesale applications: to respond, assess business suitability and manage the relationship, based on pre-contract steps and our legitimate interests in handling enquiries and operating our business.
• Marketing: to send relevant offers, newsletters and dog-birthday or seasonal reminders in accordance with your choices. We rely on consent where required by electronic-marketing law. Where the law permits marketing to existing customers without fresh consent, we rely on legitimate interests and provide the required opt-out. You can object to direct marketing at any time.
• Analytics and personalisation: to understand store performance, improve the website and measure marketing. We use consent for optional tracking where required and legitimate interests for permitted non-consent processing, subject to applicable law and your choices.

Marketing and your dog's details

We use Klaviyo for subscriber profiles, signup forms, marketing automation and relevant email messages. Your profile may include order history, dog details and permitted website or email interactions so messages can be relevant to you. Automated marketing reminders do not decide your legal rights or eligibility for a product.

You can unsubscribe using the link in a marketing email or email hello@scoffpaper.com. You can also ask us to correct or remove your dog's details or stop particular reminders, including if your circumstances have changed. Unsubscribing does not stop essential order, service or legal communications. Basket reminders are sent only where permitted by law and your marketing preferences.

Cookies and similar technologies

Our store uses technologies needed for baskets, checkout, security and privacy preferences. Optional analytics, personalisation and advertising technologies can collect browsing and interaction information. We use Google Analytics to understand visits and sales. Where enabled, advertising integrations such as Meta may help measure campaigns and deliver relevant advertising.

Use our cookie banner or cookie-preference control, where available, to manage optional tracking. Where consent is required, optional technologies should operate only with that consent. You can withdraw consent or change your choices through the store's privacy controls; contact hello@scoffpaper.com if you need help accessing them. Browser settings can also delete or block cookies, but blocking essential cookies may affect checkout. Merely browsing the site is not consent to optional cookies.

Service-specific information is available from Shopify's cookie notice, Google's privacy policy and Meta's privacy policy.

Who receives information

We share relevant information with providers needed for the purposes above: Shopify for hosting, accounts, checkout and store services; payment and fraud-prevention providers; delivery carriers and fulfilment providers; Klaviyo for marketing and customer profiles; Google Analytics and enabled advertising services subject to privacy choices; and authorised reporting, accounting, IT and professional advisers. Windsor.ai is used for connected business analytics and reporting. Access is limited to what is relevant for the service.

We may also share information where required by law, to investigate fraud or exercise legal rights, or in connection with a business sale or restructuring with appropriate protections. We do not sell customer contact lists. Shopify and some payment or advertising providers may also process information for their own purposes as explained in their privacy notices. See Shopify's privacy policy and Klaviyo's privacy notice.

International processing

Some providers process information outside the UK, including in the EEA, Canada and the United States. Applicable safeguards may include UK adequacy regulations, recognised data-protection frameworks where applicable, and approved contractual protections such as the UK International Data Transfer Agreement or UK Addendum to EU standard contractual clauses. Shopify and Klaviyo describe their transfer arrangements in their privacy and data-processing notices. Contact us for information about safeguards relevant to your data and how to obtain a copy, subject to lawful redactions.

How long information is kept

We keep information only for as long as needed for its purpose. The retention criteria depend on the type of record: order and accounting records are retained to meet tax and accounting duties and deal with potential legal claims; enquiry and complaint records are retained for resolution and any relevant dispute period; personalisation files are retained for fulfilment, support and any related dispute rather than indefinitely; account and dog-profile information is retained while needed for the relationship or relevant reminders; marketing records are retained while marketing remains lawful and relevant.

When you unsubscribe, we may retain a minimal suppression record so we can respect that choice. Fraud or dispute evidence may be retained for the relevant investigation or claim period. Cookie and provider-system retention depends on the particular service and settings. You can ask us about the retention period or criteria applicable to your records. Deletion requests are considered subject to legal record-keeping and other valid grounds for retention.

Your rights

Depending on the applicable law and circumstances, you can request access, correction, erasure, restriction or portability of your information, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. You have an absolute right to object to direct marketing. We may need reasonable information to verify your identity before disclosing personal data.

Contact hello@scoffpaper.com to exercise your rights or raise a concern. We respond within the period required by applicable law, normally one month for UK data-rights requests, subject to permitted extensions. Fraud-screening tools may flag orders for checks; contact us if you wish to query a decision or request human consideration where applicable.

You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/, or another competent supervisory authority where applicable. You do not need to contact us first, although we welcome the opportunity to resolve a concern.

Security, children and changes

We use appropriate organisational and technical measures to protect information. No online service is completely risk-free. Our shop and marketing are aimed at adults; we do not knowingly seek personal information from children. Please contact us if you believe a child has supplied information that should be removed.

We may update this notice to reflect changes in the store, services or law. The date above identifies the latest version, and we will provide additional notice where required.