Privacy
How Diba Delights LTD handles personal data for orders and accounts on Diba Delights.
Diba Delights LTD (“we”) operate the Diba Delights storefront. When you create an account, place an order, or send a contact message, we process the personal data needed to run those flows. Contact: hello@diba-delights.co.uk.
Company details
Registered name: Diba Delights LTD.
Company number: 17200817
Registered office: 82A James Carter Road, Mildenhall, IP28 7DE
What we collect
Account: email, name, and related Better Auth session identifiers; optional phone on profile/address records where provided.
Orders: contact email/phone, delivery address and postcode, order lines (including snapshotted product details), delivery window snapshot, notes, and payment status mirrored from Stripe.
Contact form: name, email, optional phone/subject, and message body (stored for admin follow-up).
Technical: IP used for rate limiting; error signals via Sentry; Session Replay only when you accept cookies; hosting logs, page-view traffic, and Core Web Vitals via Vercel.
Why we use it
To fulfil orders and delivery, operate your account, send transactional email, process payments, answer enquiries, keep the site secure and reliable, measure storefront traffic and performance, and meet legal obligations. We do not sell your personal data or use third-party marketing or advertising trackers on this site.
Processors
- Neon — PostgreSQL database (order, account, catalogue, and message data).
- Better Auth — Sign-in and session.
- Resend — Transactional email (verification, password reset, order lifecycle, admin notifications).
- Stripe — Payment processing, Checkout sessions, refunds, and payment-related webhooks. Checkout may set cookies on Stripe-hosted domains.
- Sentry — Error monitoring. Session Replay on the storefront runs only after cookie consent.
- Vercel — Application hosting, edge/runtime logs, Blob storage for catalogue media uploads, Web Analytics (cookieless page-view traffic), and Speed Insights (Core Web Vitals performance).
- Upstash Redis (via Vercel KV) — Server-side distributed rate limiting only — not application caching or marketing analytics.
Cookies and similar technologies
Strictly necessary: Better Auth signed session cookies so you can stay signed in for checkout; admin sidebar preference (sidebar_state) on admin surfaces only.
Storefront observability: Vercel Web Analytics (cookieless page views) and Speed Insights (Core Web Vitals) run on the public shop to help us understand traffic and performance. These are not marketing or advertising trackers.
With consent: Sentry Session Replay on the storefront client. You can choose “Accept” or “Necessary only” in the cookie banner. We do not load Google Analytics, GTM, Plausible, PostHog, Mixpanel, Hotjar, or similar third-party marketing trackers.
Stripe Checkout may set cookies on Stripe-controlled domains during payment; those are Stripe's responsibility.
Your rights
Under UK GDPR you may request access, correction, erasure, restriction, or objection where applicable, and complain to the ICO. Email hello@diba-delights.co.uk or use the contact form.