Privacy Policy

Last updated: [insert date] — Applies to visitors and customers of Cakeify (cakeify.co.uk)

Cakeify (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect when you visit our website, contact us, or place an order, how we use it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Cakeify is a bespoke cake business based at:

For the purposes of UK data protection law, Cakeify is the “data controller” of the personal data described in this policy.

2. What personal data we collect

We only collect the data we need in order to respond to you, process your order, or run our website properly. This may include:

• Contact details — name, email address and phone number, when you submit our contact/enquiry form or contact us directly.
• Order details — information you give us about your cake (occasion, flavours, design, delivery address, event date) when placing an order.
• Payment information — if you pay online, payment is processed by a third-party payment provider; we do not store your full card details ourselves.
• Technical data — such as IP address, browser type and device information, collected automatically when you visit our website.
• Cookie data — see Section 6 below.

3. How we use your data

We use your personal data to:

• Respond to enquiries submitted through our contact form or by phone/email
• Process and fulfil bespoke cake orders, including delivery arrangements
• Send order-related communications (confirmations, updates, invoices)
• Improve our website and the service we provide
• Comply with our legal and accounting obligations
• With your consent, send occasional marketing updates (you can opt out at any time)

4. Our legal basis for processing your data

Under UK GDPR, we rely on the following legal bases:

• Contract — where processing is necessary to fulfil an order you’ve placed with us
• Legitimate interests — for example, responding to enquiries and improving our website, where this doesn’t override your rights
• Consent — for optional marketing communications, which you can withdraw at any time
• Legal obligation — where we need to keep records for tax and accounting purposes

5. Who we share your data with

We do not sell your personal data. We may share it with trusted third parties only where necessary, including:

• Payment processors, to handle online payments securely
• Delivery or courier providers, where we’re arranging delivery of your cake
• Website hosting and email service providers who help us run our site and communications
• Google Maps, if you view an embedded map on our Contact page (Google may set its own cookies — see their privacy policy)
• HM Revenue & Customs or other authorities, where required by law

All third parties are required to keep your data secure and only use it for the purposes we’ve instructed.

6. Cookies

Our website may use cookies and similar technologies to help it function properly and to understand how visitors use the site (for example, basic analytics). You can control or disable cookies through your browser settings. Disabling cookies may affect how parts of our website work.

7. How long we keep your data

We only keep personal data for as long as necessary for the purposes it was collected, including to satisfy legal, accounting or reporting requirements. Enquiry form submissions that don’t lead to an order are typically deleted after a reasonable period. Order and invoice records are kept in line with UK tax record-keeping requirements (currently up to 6 years).

8. Your rights

Under UK GDPR, you have the right to:

• Ask us what personal data we hold about you, and request a copy
• Ask us to correct inaccurate or incomplete data
• Ask us to delete your data, where there’s no legal reason for us to keep it
• Ask us to restrict or object to certain processing
• Withdraw consent at any time, where we’re relying on consent (e.g. marketing emails)
• Request your data in a portable format, where technically feasible

To exercise any of these rights, please contact us using the details in Section 1. We’ll respond within one month, as required by law.

9. Keeping your data secure

We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children’s privacy

Our website and services are intended for adults placing cake orders. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this privacy policy from time to time, for example to reflect changes in the law or how we operate. Any updates will be posted on this page with a revised “last updated” date.

12. How to complain

If you have a concern about how we’ve handled your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the UK’s data protection regulator:

13. Contact us

If you have any questions about this privacy policy or how we handle your data, please get in touch: