Privacy Policy

Data controller

SweetCrumb Cakes Ltd

18 Store Street, London, WC1E 7DH, United Kingdom

Email: [email protected]

Phone: +44 20 7946 0958

1. What personal data we collect

We may collect personal data directly from you and, in limited cases, automatically from your device. The categories of data we may collect include:

• Identity and contact data: name, email address, phone number, and message content when you contact us.
• Order-related details: event date, delivery instructions, serving counts, and design preferences if you share them in an enquiry.
• Technical data: basic device and browsing data that may be stored in essential cookies (for example, cookie consent status).

2. How we use your data

We use personal data to operate our website and to respond to enquiries. The most common purposes are:

• To respond to your messages, provide quotes, and confirm details for pickup or delivery.
• To maintain records of communications for customer service and planning.
• To ensure the website functions correctly and remembers cookie preferences.

3. Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases, depending on the context:

• Contract: to take steps at your request prior to entering a contract, and to perform an order if agreed.
• Legitimate interests: to respond to enquiries, maintain service records, and improve the reliability of our website.
• Consent: for optional cookies, and where required for direct marketing communications.
• Legal obligation: where we must keep records to comply with applicable law.

4. Cookies and similar technologies

We use cookies that are necessary for basic website operation and to remember your cookie preference. We may also use optional analytics cookies to understand which pages are helpful. Optional cookies are only used if you accept them in the cookie consent box.

You can change your choice by clearing cookies in your browser and revisiting the site, which will show the consent box again.

5. Sharing your data

We do not sell personal data. We may share data only when needed to provide services or comply with the law. Examples include:

• Service providers that support website operations or communications, bound by confidentiality and security obligations.
• Delivery partners, where necessary, to fulfil a delivery request using the address details you provide.
• Authorities or professional advisers if required by law or to protect our legal rights.

6. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy. Enquiry messages are typically retained for a reasonable period to manage follow-up and customer support. Where an order is placed, related records may be retained longer to support service, accounting, and legal requirements.

7. Security

We take reasonable technical and organisational measures to protect personal data against accidental loss and unauthorised access. No website can guarantee absolute security, but we work to minimise risk through access controls and careful handling of enquiries.

8. Your rights

Depending on the circumstances, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to request data portability. To exercise your rights, contact us using the details above. We may request information to verify your identity.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

9. Children

Our website is intended for general audiences and is not directed at children. If you believe a child has provided personal data to us, please contact us so we can address the issue.

10. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.