Privacy Policy Derby Cake Maker
1. Introduction
We are committed to protecting your privacy in accordance with the UK GDPR and Data Protection Act 2018. This policy explains how we collect and use your personal information when you order cakes or use our website.
We are committed to protecting your privacy in accordance with the UK GDPR and Data Protection Act 2018. This policy explains how we collect and use your personal information when you order cakes or use our website.
2. Information We Collect
We may collect and process:
We may collect and process:
- Identity & Contact Data: Name, billing/delivery address, email address, phone number
- Financial Data: Bank details for any refunds
- Website Usage Data: IP address and cookie information.
3. How We Use Your Data
We use your data to:
We use your data to:
- Process and deliver your cake orders.
- Contact you regarding your order.
- Maintain internal records
- We may store your information for seven years
- We use photos of completed work on our website and social media to promote the business. If you do not wish to have your cake published, please advise michelle@derbycakemaker.co.uk
4. Sharing Your Data
We do not sell your personal data. We may share data with:
We do not sell your personal data. We may share data with:
- Trusted suppliers/partners (e.g., couriers) to fulfill orders.
- Legal authorities if required by law.
5. Data Security
We have security measures in place to prevent your personal data from being lost, used, or accessed without authorisation. Information is stored on devices, cloud storage and in paper form with protection in place where possible eg firewalls, virus protection, encryption, SSL certificate on website, password protected devices. I do not sell, trade email lists or rent out your data to any third party
We have security measures in place to prevent your personal data from being lost, used, or accessed without authorisation. Information is stored on devices, cloud storage and in paper form with protection in place where possible eg firewalls, virus protection, encryption, SSL certificate on website, password protected devices. I do not sell, trade email lists or rent out your data to any third party
6. Your Rights
Under UK data protection law, you have the right to access, amend, or request deletion of your personal data. Contact us at michelle@derbycakemaker.co.uk) to make a request.
Under UK data protection law, you have the right to access, amend, or request deletion of your personal data. Contact us at michelle@derbycakemaker.co.uk) to make a request.
7. Changes to Policy
We may update this policy. Please check this page regularly.
We may update this policy. Please check this page regularly.
.
Last updated 3 May 2026
