Privacy policy

GDPR Compliance Statement
This Privacy Policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). We process personal data lawfully, fairly, transparently, and only for specific, legitimate purposes.

Last updated: January 2026

Who we are

This website is operated by Pink Taco Ltd, trading as Cliterally The Best (“we”, “us”, “our”).

Our website address is: www.cliterallythebest.co.uk.

Pink Taco Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller.

What personal data we collect and why

Under UK GDPR, we must have a lawful basis for collecting and using personal data. Depending on the context, we rely on one or more of the following lawful bases:

  • Consent – where you have given clear permission (e.g. mailing list sign‑ups, non‑essential cookies)
  • Contract – where processing is necessary to fulfil an order or provide a service
  • Legal obligation – where we must process data to comply with the law (e.g. tax or accounting records)
  • Legitimate interests – where processing is necessary to operate and improve our website, provided your rights are not overridden

We never sell your personal data.
We only collect personal data where it’s genuinely needed to run the site, provide services, or improve your experience.

Comments

When visitors leave comments, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string. This helps us detect spam and keep the site safe.

An anonymised string (hash) created from your email address may be shared with the Gravatar service to check if you use it. The Gravatar privacy policy is available at: https://automattic.com/privacy/. Once your comment is approved, your profile picture (if linked via Gravatar) may be publicly visible next to your comment.

Media uploads

If you upload images to the website, please avoid including embedded location data (EXIF GPS). Visitors to the site may be able to download and extract location data from images.

Contact forms

When you contact us through a form, we collect the information you choose to provide (such as your name and email address). This data is used solely to respond to your enquiry and is not used for marketing unless you have explicitly opted in.

Shopping & orders

If you purchase products or services from us, we collect the personal information required to process your order (such as your name, email address, billing and delivery details, and payment-related information).

We use this information to:

  • Process and fulfil orders
  • Communicate with you about your purchase
  • Meet legal and accounting obligations

Payment details are handled securely by our payment providers, and we do not store full card details on our servers.

Mailing list

If you sign up to our mailing list, you do so via explicit opt-in. We collect your name and email address only for the purpose of sending you updates, resources, or marketing communications you have agreed to receive.

You can unsubscribe at any time using the link in our emails or by contacting us directly.

Cookies

We use cookies to make our website function properly and to improve your experience.

  • If you leave a comment, you may opt in to saving your name, email address, and website in cookies. These are for convenience and last for one year.
  • If you log in, we set temporary cookies to check whether your browser accepts cookies. These contain no personal data and are deleted when you close your browser.
  • Login cookies last for two days, or two weeks if you select “Remember Me”. Screen preference cookies last for one year.
  • If you edit or publish content, an additional cookie may be stored. This contains no personal data and expires after one day.

You can manage or withdraw your cookie preferences at any time via our cookie banner.

Advertising & third‑party ads

Some blog pages contain advertisements provided by third‑party advertising publishers. These partners may use cookies or similar technologies to show relevant ads and measure performance.

These cookies are non‑essential and are only used if you consent via our cookie banner. We do not control these third‑party cookies directly; please refer to the relevant advertising partner’s privacy policy for more information.

Embedded content from other websites

Articles on this site may include embedded content (such as videos, images, or posts). Embedded content behaves in the same way as if you visited the other website directly.

These external sites may collect data about you, use cookies, and track your interaction with the embedded content, particularly if you are logged into their platform.

Analytics

We may use analytics tools to understand how visitors use our site so we can improve content and usability. Analytics cookies are only activated if you provide consent.

How long we retain your data

  • Comments and their metadata are retained indefinitely to allow automatic approval of follow‑up comments.
  • Registered users (if any) can view, edit, or delete their personal information at any time (except usernames).
  • Order and transaction data is retained only as long as required for legal, tax, and accounting purposes.
  • Mailing list data is retained until you unsubscribe.

Your rights over your data

Under UK GDPR, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to how we process your data
  • Withdraw consent at any time where processing is based on consent
  • Request a copy of your data in a portable format

These rights are not absolute and may be limited where we are legally required to retain data for administrative, legal, or security purposes.
You have the right to:

  • Request access to the personal data we hold about you
  • Request correction or deletion of your data
  • Withdraw consent at any time (where processing is based on consent)
  • Request data portability where applicable

This does not include data we are legally required to keep for administrative, legal, or security reasons.

Where your data is sent

Visitor comments may be checked through automated spam detection services.

Some data may be processed by trusted third‑party service providers (such as hosting, email, payment, analytics, or advertising partners) who are contractually required to protect your information.

Data controller

For the purposes of UK data protection law, Pink Taco Ltd (trading as Cliterally The Best) is the data controller responsible for your personal data.

Contact us

If you have any questions about this policy, your data, or wish to exercise your rights, you can contact us via the website.

If you are unhappy with how we handle your data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator (www.ico.org.uk).

Changes to this policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. The most current version will always be available on this page.

We believe in consent, clarity, and care — always.
If you have any questions about this privacy policy or how your data is handled, you can contact us via the website.

We believe in consent, clarity, and care — always.