Privacy Policy

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our online platform, browse our menu, place an order, request a custom bake or otherwise use our services. We provide freshly baked bread, pastries, cakes and custom orders for local residents and businesses, including collection and local delivery services.

We handle personal information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable privacy laws.

Who We Are

The bakery operating this service is the controller responsible for personal information collected through our site and related ordering activities.

Information We Collect

Depending on how you use our service, we may collect the following information:

• Your name and contact or delivery details when you place an order or make an enquiry.
• Order details, including selected products, collection or delivery preferences, quantities and requested dates.
• Information supplied for custom orders, such as design requirements, inscriptions, serving quantities and dietary or allergen-related information.
• Payment and transaction information. Payment details may be collected and processed directly by an authorised payment provider rather than stored by us.
• Information you provide when requesting information, reporting a problem or giving feedback.
• Technical information, such as device type, browser information, approximate location, IP address and information about how you use our site.
• Cookie and similar technology information, where permitted by law and your preferences.

How We Use Personal Information

We use personal information only where there is a lawful basis to do so, including to:

• Process, fulfil and manage orders for collection or local delivery.
• Prepare custom orders and take account of relevant dietary or allergen information.
• Provide menu information, respond to enquiries and administer customer service.
• Process payments, prevent fraud and maintain transaction records.
• Operate, secure, troubleshoot and improve our online platform.
• Comply with legal, tax, accounting, food safety and regulatory obligations.
• Send promotional information only where we have a lawful basis and, where required, your consent.

Lawful Bases for Processing

Our processing may be necessary to perform a contract with you, to take steps at your request before entering into a contract, to comply with a legal obligation, or for our legitimate interests in operating and improving the bakery and our services. Where none of these bases applies, we will ask for consent. You may withdraw consent at any time, although this will not affect processing that took place before withdrawal.

Sharing Personal Information

We may share relevant information with carefully selected service providers that help us operate our business, such as payment processors, ordering and hosting providers, delivery partners, website security providers, accountants and professional advisers. These providers may process information only for authorised purposes and under appropriate confidentiality and data protection obligations.

We may also disclose information where required by law, to protect our rights or property, to prevent fraud or misuse, or in connection with a sale, restructuring or transfer of the business. We do not sell personal information.

Cookies and Similar Technologies

Our site may use essential cookies needed for security, ordering and core functionality. With your consent where required, we may also use analytics or preference technologies to understand site usage and improve the service. You can manage non-essential cookies through our cookie controls or your browser settings. Disabling some cookies may affect site functionality.

Data Retention

We keep personal information only for as long as necessary for the purposes described in this policy, including fulfilling orders, resolving disputes, maintaining business records and meeting legal, tax and accounting requirements. Retention periods vary according to the type of information and the reason it was collected. Information that is no longer required is securely deleted or anonymised.

Security

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No online service can be guaranteed to be completely secure, and you should avoid sharing information that is not necessary for your order or enquiry.

International Transfers

Some service providers may process personal information outside the United Kingdom. Where this occurs, we will use an adequacy decision, appropriate safeguards or another lawful transfer mechanism required by applicable data protection law.

Your Rights

Subject to legal conditions and exemptions, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of your information in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests or direct marketing.
• Request portability of information you provided where applicable.
• Withdraw consent where processing relies on consent.

To exercise your rights or raise a privacy concern, please write to us at the physical address provided in this policy. We may need to verify your identity before responding. You also have the right to complain to the UK Information Commissioner’s Office if you believe your information has been handled unlawfully.

Children’s Information

Our online platform is not directed at children. We do not knowingly collect personal information from children without appropriate consent from a parent or guardian. If you believe a child has provided personal information to us, please contact us by post so that we can review and remove it where appropriate.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or data handling practices. The updated version will be published on our site, and the revised policy will apply from the date it is made available.

If you have questions about this policy or our handling of personal information, please write to the bakery at 10 Ferris Grove, Birmingham, Solihull, B27 7SL, United Kingdom.