Privacy Policy

This Privacy Policy describes how Cholby collects, uses, and protects your personal information when you visit or make a purchase from cholby.com.

We are committed to maintaining the trust and confidentiality of our patrons. We do not sell, rent, or trade customer contact lists with third parties for commercial marketing purposes.

When you visit, sign in, create an account, contact us, or place an order, we collect the information needed to operate and improve our service:

• Account Information: Your email address and account-verification records used to create or access your account, protect it from misuse, and provide customer support.
• Order Information: Full name, delivery address, phone number, email address, and order history required to process, deliver, support, and maintain records of your purchases.
• Device & Interaction Information: IP address, browser version, time zone, screen resolution, and navigation patterns on our storefront.

Guest checkout does not automatically create an account. After an order is placed, you may choose to create an account using the same email address so you can track orders and check out faster.

We use essential session cookies and performance analytics scripts to analyze user traffic and optimize shopping experience. Specifically, our storefront utilizes:

You can manage cookie settings or disable non-essential tracking cookies via your web browser preferences at any time.

Online payments are securely processed by regulated third-party payment gateways, primarily Stripe. All transactions are protected via 256-bit TLS encryption and 3D Secure (3DS) authentication compliant with UK PCI-DSS Level 1 standards.

Cholby does not store, process, or retain customers' payment card credentials or sensitive banking details on its servers. Card verification and 3D Secure (3DS) authentication take place directly on the gateway processor's encrypted interface.

We retain account and order information for customer service, fraud prevention, operational records, and applicable tax or legal obligations. Where information is no longer required, we delete or anonymize it in line with our retention practices.