Privacy policy

01Overview

This policy explains what personal information Choclably collects when you use choclabl.com, how we use it, who we share it with and the choices you have. We collect only what we need to make, deliver and support your orders, and we never sell your personal information.

By using the site you agree to this policy. If you don't agree, please don't use the site.

02What we collect

Information you give us

• Your account: your email address, name, phone number (optional) and password. Passwords are stored by our sign-in provider in hashed form; we never see them.
• Orders: your name, email, phone (optional), delivery address, the bars you ordered, any discount or gift card code, and your gift note if you add one.
• Gift cards you buy: your name and email, the recipient's name and email, your message, and, for a custom design, the description you wrote.
• Saved bars and addresses you keep in your account.
• Messages: what you send through the contact form, and live chat requests you pass to our team through Ruby.

Ruby, our AI assistant

When you type to Ruby or talk to her, your message (and, for spoken questions, your voice recording) is sent to the AI providers that power her, so she can understand it, answer and speak the reply. She also sees the bar in the builder, your cart and the page you're on, so she can help with them. We don't keep your voice recordings once Ruby has answered. If you ask for a live chat with the team, that request and the conversation so far are saved so we can reply.

Information collected automatically

• Technical information such as your IP address and browser type, used to keep the site secure and to limit abuse (for example, too many sign-in attempts).
• Cookies and browser storage that keep you signed in and remember your cart. See our cookie policy.

We don't use advertising or analytics cookies in the shop itself, and we don't track you across other websites. Our payment provider's cookies and similar technologies are described in our cookie policy.

03How we use it

• To make, pack and deliver your orders, send gift cards to their recipients, and email you about your orders.
• To run your account: sign-in codes, password resets, saved bars and addresses.
• To answer your questions, through Ruby, email or live chat.
• To show your order on the tracking map, using your delivery address.
• To keep the site safe and working, and to prevent fraud and abuse.
• To send product emails, only if you've opted in. You can turn these off any time in My account → Notifications.

04Who we share it with

We share personal information only with service providers who help us run Choclably, and only what they need to do their job:

• Hosting, accounts and our database, where your account, orders and gift cards are stored.
• Email delivery, to send sign-in codes, order emails and gift cards.
• AI providers (through OpenRouter), to power Ruby and to create custom gift card designs from your description.
• OpenStreetMap, to turn a delivery address into a point on the tracking map, and Mapbox, to locate our pickup point and display the map. Mapbox receives your IP address and requests for the map areas you view.
• Stripe, our payment provider, when you pay through the secure payment fields in our checkout. Stripe handles your card details under its own privacy policy; we never see or store your full card number.
• Delivery carriers, who need your name and address to deliver your bars.

We may also share information if the law requires it, to protect our rights or the safety of others, or as part of a sale or merger of our business. We don't sell your personal information or share it for targeted advertising.

05How long we keep it

We keep your account information until you delete your account. Order records are kept after that, because we need them to deliver orders and for our tax and accounting records. Contact and live chat messages are kept as long as needed to help you and to keep a record of our conversations.

Information in your browser (like your cart) stays there until you clear it.

06Your rights and choices

• See and update your profile, addresses and saved bars any time in My account.
• Delete your account in My account → Delete account. This removes your sign-in, profile, addresses and saved bars.
• Stop product emails in My account → Notifications. Order emails always continue, so you don't miss a delivery.
• Ask us for a copy of your information, to correct it, or to delete it, by emailing [email protected].

Depending on where you live, you may have other rights under local law (for example in California). Contact us and we'll help.

07Security

Sign-in sessions use secure, HttpOnly cookies, passwords are hashed by our sign-in provider, and our database can only be reached by our own servers. No method of transmission or storage is perfectly secure, but we work hard to protect your information.

08Children

Choclably isn't directed to children under 13, and we don't knowingly collect personal information from them. If you think a child has given us personal information, please contact us and we'll delete it.

09Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top of the page, and for significant changes we'll let you know by email or on the site.

10Contact us

Questions about your privacy? Email [email protected] or use the contact page.