Privacy Centre (GDPR)
Last updated: 31 October 2026
This page explains what personal information Co2 Cartridges (www.co2cartridges.co.uk) collects, why, who sees it, how long we keep it, and what you can do about it.
In short:
- We use your details to take, deliver and support your order.
- We never sell them.
- We only email you marketing if you tick the box for it.
- You can opt out of marketing at any time.
1. Who we are
Co2 Cartridges is a trading name of Bliss Drinks Ltd, company number 14755929. We are the "controller" of your personal information, which means we decide how and why it is used.
- Registered office (and postal address for requests): 2 Port Way, Port Solent, Portsmouth, Hampshire PO6 4TY
- Information Commissioner's Office (ICO) registration number: ZB570904
- Email: contact@blissdrinks.co.uk
- Phone: 023 9237 8700 (office), or 07397 051880 (mobile and WhatsApp)
2. What we collect and where it comes from
Most of it comes from you, when you check out, register or contact us.
- Order details: your name, email, phone number, delivery and billing address, optional company name, and what you ordered.
- Account and trade details: if you register or apply for a trade account, the details on the form, including the "I am over 18" tick.
- Payment details: card payments are taken by Stripe. We never see or store your full card number. If you pay by bank transfer we see the payment on our bank statement.
- Technical details: your IP address when you place an order, and the contents of your basket while you check out.
- Address lookup: what you type in the address box is sent to our address lookup supplier (Ideal Postcodes), which sends back matching addresses. The delivery map at checkout comes from Google Maps.
- Age and use checks: for some products, such as nitrous oxide cream chargers, we may ask for proof of age and what you will use the product for (see section 6).
- Messages: anything you send us by email, phone or WhatsApp.
- Website use: which pages are viewed and which ads led to a visit, but only if you accept cookies (see section 7).
Giving us your name, address, email and phone number is a contract requirement. Without them we cannot take or deliver your order. Everything else (marketing, reviews) is optional.
3. What we use it for, and why the law lets us
| What we do | Why the law lets us (UK GDPR basis) |
|---|---|
| Take payment, pack and deliver your order, handle returns, refunds and questions | Contract (we need it to do what you ordered) |
| Answer your emails, calls and messages | Legitimate interests (we need to reply to people who contact us) |
| Look up and check delivery addresses, and show the delivery map | Contract (we need a correct address to deliver) |
| Keep tax and accounting records (HMRC, VAT, Companies Act) | Legal obligation |
| Spot and stop fraud, chargebacks, card misuse and misuse of products, and send staff alerts about orders that need a call | Legitimate interests (we have a real interest in not losing money to fraud and in not supplying products for harmful use) |
| Check age and intended use on restricted products, and keep a record | Legitimate interests (we have an interest in not supplying people who should not have the product and in being able to show we checked) |
| Email you when an out-of-stock product is back, if you ask us to | Consent (you give us your email for that product) |
| Let Google invite you to a survey about your order (Google Customer Reviews) | Consent (through the cookie choice in section 7) |
| Send you marketing emails | Consent (the tick box at checkout or sign-up) |
| Keep a record of what you agreed to at checkout (the wording you saw and whether you ticked) | Legal obligation and legitimate interests (we must be able to show you agreed) |
| Measure how the site is used and which ads work | Consent (cookies, section 7) |
We use some automatic matching to find past age checks and to flag possible fraud. A person makes the final decision on whether to supply you.
4. Who we share it with
We never sell your personal information. We share it only with the types of organisation below, and only for the reasons given.
- Payment: Stripe (card, Apple Pay and Google Pay payments).
- Delivery: our couriers, which may include DPD, Royal Mail, DHL, InPost, FedEx and pallet carriers. They get your name, address and phone number, and sometimes your email, so they can deliver and send you tracking updates.
- Email: Postmark sends our order and service emails. MailerLite sends our marketing emails to people who ticked the marketing box.
- Address services: Ideal Postcodes (address lookup at checkout) and the services our staff use to check addresses. Our address lookup is loaded through the jsDelivr content network, which sees your IP address when it does.
- Website hosting: our hosting provider stores and runs the website and its data for us. Some page parts (icons, styles and the address lookup) load from content networks such as cdnjs, jsDelivr and Tailwind, which see your IP address but set no cookies on our site.
- Accounting: our accounting software receives daily sales totals, not your personal details.
- Google: Google Maps at checkout and on your order confirmation page, and Google Analytics, Google Ads and Google Customer Reviews only if you accept those cookies (see sections 5 and 7).
- Staff alerts: if an order needs a phone call, your name, phone number and order number are posted to a private staff channel on Discord.
- Messaging: if you send us messages or ID by WhatsApp, WhatsApp (Meta) handles them.
- Authorities and advisers: HMRC, the police, trading standards or other bodies where the law requires it or to deal with fraud, and our professional advisers.
5. Emails we send
Order and service emails
Invoices, dispatch and tracking emails, and messages about your order. We send these because you ordered. You cannot opt out of them while an order is open.
One reminder if you leave checkout
If you enter your email at checkout and do not finish, we may send you one email about your basket. Checkout has a box to tick if you would rather we did not. The email has an unsubscribe link and a link to restore your basket. We send no more than one of these emails to you in any six months.
Back-in-stock emails
If a product is out of stock and you give us your email to hear when it is back, we keep your email and the product, and send you one email when it is back in stock. Each email has a link to cancel. We do not use this email for anything else.
Marketing emails
We send occasional discounts and news only if you ticked the marketing box. You can unsubscribe at any time using the link in any email, or by emailing us. Our marketing emails are sent through MailerLite.
Reviews
If you accept advertising cookies, we load Google Customer Reviews. It shows a small Google rating badge, and on your order confirmation page we pass Google your order number, email address, delivery country and estimated delivery date. Google then asks whether you want to take part in a survey about your order. If you reject advertising cookies, none of this loads.
6. Age and intended-use checks
Some products, including nitrous oxide cream chargers, can be misused. For larger orders, or where something looks wrong, we may email or message you to ask for proof of age and what you will use the product for. If you do not give us this information, we may not be able to supply the product.
- You can send ID by WhatsApp. We note the result on your order.
- For an individual we record your date of birth and your stated use, in your own words.
- For a business we record the company details and links that show it is a genuine business.
- We may reuse a past check on your later orders if the email address or phone number matches. The order note says when we did.
- We use this only to decide whether to supply, and to show we checked. We do not share it with anyone except the suppliers listed in section 4 (for example WhatsApp, which handles messages you send it) and the authorities where the law requires it.
7. Cookies
When you first visit, a bar at the top of the page asks whether to allow non-essential cookies. "Reject all" is as easy as "Accept all", and "Choose" lets you pick. Nothing non-essential is loaded or set until you accept. You can change your choice at any time using the Cookie settings link at the bottom of every page. If you withdraw, we delete the Google cookies from our site.
| Cookie | What it does | How long |
|---|---|---|
| PHPSESSID, ccUser | Essential. Keeps your basket and checkout working. | Until you close your browser (PHPSESSID); 28 days (ccUser) |
| ccRemember | Essential. Keeps you logged in, only if you log in. | 28 days |
| dc_consent | Essential. Remembers your cookie choice. | 6 months |
| __stripe_mid, __stripe_sid | Essential. Set by Stripe, our card payment provider, to prevent payment fraud when the quick-pay buttons load. | 1 year (__stripe_mid); 30 minutes (__stripe_sid) |
| _ga, _ga_ followed by an ID | Analytics (Google Analytics). Counts visits and shows which pages are used. Only if you accept analytics. | Up to 2 years |
| _gcl_au and other _gcl_ cookies | Advertising (Google Ads). Measures which ads led to a sale. Only if you accept advertising. | Up to 90 days |
Google Customer Reviews also loads only if you accept advertising (section 5). Google Maps at checkout sees your IP address but sets no cookies on our site. Google's cookie information is at policies.google.com/technologies/cookies.
8. How long we keep it
| What | How long |
|---|---|
| Order, invoice and payment records | At least 6 years from the end of the tax year they relate to, because HMRC requires it |
| Customer and order records, age and intended-use records, fraud and misuse notes | Kept until we set a deletion schedule. We keep them to prevent fraud and repeat misuse, to show we checked age, and to handle disputes. |
| Basket details from unfinished checkouts | Kept until we set a deletion schedule. We keep them to run the basket reminder and to prevent fraud. |
| Marketing email address | Until you unsubscribe or ask us to stop |
| Back-in-stock requests | Kept until we set a deletion schedule. Cancelling stops the email. |
| Records of what you agreed to at checkout | Kept so we can show what you agreed to |
| Basket reminder opt-outs and unsubscribe records | Kept so we can honour your choice |
If you ask us to erase your information, we will erase what we do not need. We keep records we are legally required to keep, or need to defend a legal claim, or need to show we checked a customer's age and to prevent repeat misuse. We will tell you what we kept and why.
9. Sending information outside the UK
Some of our suppliers, including Google, Stripe, Postmark, WhatsApp and Discord, handle data in the United States and other countries. We only use suppliers that provide a lawful safeguard for transfers outside the UK, such as an adequacy arrangement or the ICO's approved contract terms. Ask us if you want details for a particular supplier.
10. Your rights
Under UK data protection law you can:
- ask for a copy of the information we hold about you
- ask us to correct anything that is wrong
- ask us to erase your information (see section 8 for what we may need to keep)
- ask us to restrict how we use it
- ask us to give you your information in a portable format, where we use it because you consented or for your contract
- object to direct marketing at any time. This right is absolute. Tell us and we stop, free of charge.
- object to anything we do on the basis of legitimate interests
- withdraw consent at any time. It is as easy to withdraw as it was to give. Untick the box where you can, use the unsubscribe link, or email us. Withdrawing does not affect anything we did before.
Email contact@blissdrinks.co.uk, ring 023 9237 8700 or 07397 051880, or write to us at the registered office in section 1. We reply within one month.
11. Complaints
Please talk to us first, but you have the right to complain to the Information Commissioner's Office (ICO) at any time. Website: ico.org.uk/make-a-complaint. Helpline: 0303 123 1113.
12. Changes to this page
If we want to use your information for something new, we will update this page and, where the law requires, tell you before we do it. The date at the top shows when it last changed.