Privacy Policy

1. Introduction. The privacy of your personal data is important so please take proper time to read this privacy notice carefully, so that you are aware of how and why Cakesmiths process your personal information. Cakesmiths gather and process your personal information in accordance with the UK General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, which encompasses it.    This Privacy Notice outlines the personal information Cakesmiths collects, processes and stores about you when you interact with us.  Cakesmiths is the data controller of any personal data processed about you and is a company registered in England and Wales with a registered office at 6 Kingsland Trading Estate, St Phillips Road, Bristol, Somerset, BS2 0JZ.  

 

We may change this privacy notice from time to time. You can revisit this privacy notice at any point to ensure that you are aware of the most recent version that will apply each time you access our website or interact with us.  

 

The person responsible for Data Protection within Cakesmiths is Scott Trent, Finance Director. The following information is designed to be clear and transparent and will hopefully answer any questions you have but if not, please do get in touch by emailing Scott using the following email address: [email protected].

 

2. Personal Information Collected.  

Cakesmiths will collect, process, and store the following personal information about you depending on how you interact with us:   Interaction. Information Collected, Processed and Stored. Purchase Information. When purchasing through our website, we will collect your title, name, gender, date of birth, company name, credit card information, billing address, delivery address, your orders and receipts, email, and telephone number.   Details of your shopping preferences and your favourites list may also be gathered. Your payment card information will be gathered, processed, and stored when making a purchase. Face to Face. Details of your interactions with us in our café, or at special events such as at farm and deli shows and coffee festivals. For example, we may keep notes about any conversations we have had, or details of a complaint you have made. Your image may be recorded in Cakesmiths car parks or in our café by CCTV. Your payment card information will be gathered, processed, and stored when making a purchase. Social media or enquiry information. Your social media name and comments may be retained if you interact with us through those channels. Details of any enquiry will also be gathered to enable us to deal with it. Complaints Information. Information you submit to us when making comments, enquiries, or complaints about our products or service. Subscription and Marketing requests. Subscription or marketing request information will be gathered when you specifically opt-in to receive them. Cookies and analytical data. Information gathered through the use of cookies in your web browser, such as your IP address, will be gathered.  

 

3. How Cakesmiths Collect Your Data.  

The personal information processed by Cakesmiths is provided directly by you, including:  

a.     When you visit the Cakesmiths website, contact us via telephone or on site in our café, to browse or purchase products.

b.     When you visit the Cakesmiths website to place an order and check out as a guest.

c.     When you create or log into your Cakesmiths website account.

d.     When you shop online, we capture information through technical cookies and similar technologies which you can manage when you visit our site.

e.     When you visit a Cakesmiths café or stand at a special event, such as a coffee festival, to make enquiries, comment or place an order.

f.      When you engage with us on social media such as Instagram or Facebook.

g.     When you contact us by any means with queries or complaints.

h.     When you enter a Cakesmiths competition or prize draw.

i.      When you fill out any form, such as an accident form on site.

j.      When you use Cakesmiths car park or café, CCTV footage will be captured.

k.     When agreeing to marketing of Cakesmiths products.

 

4. How Your data Will Be Used By Cakesmiths.  

Cakesmiths will use your personal data for the purposes outlined below. Please note, if you choose not to share your personal data with us, or refuse certain contact permissions, we may not be able to provide some products or services you have requested:  

a.     To process any orders that you make by using the Cakesmiths website, via telephone or on site in our café. We collect your personal data during checkout, so that we are able to process your order and comply with our legal obligations.

b.     To respond to your queries, refund requests and complaints. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations, and our legitimate interests in providing you with an excellent level of service.

c.     To send you email notifications when you place a product in your basket and you abandon your browsing before completing your checkout. We do this based on our legitimate interest.

d.     To protect our business and your account from fraud and other illegal activities. This includes using your personal data to maintain, update and safeguard your account. We’ll also monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our websites. We’ll do all of this as part of our legitimate interest.

e.     To protect our customers, employees, assets, and premises from crime, we operate CCTV systems in cafe and car parks which may record images for security.

f.      To process payments, prevent fraudulent transactions and help protect our customers from fraud. We do this on the basis of our legitimate business interests.

g.     With your consent, we will use your personal data, preferences, and details of your transactions to keep you informed by email or post about relevant products and services including tailored special offers, discounts, promotions, events, competitions and so on. You are free to opt out of hearing from us at any time.

h.     To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, product recall notices, and legally required information relating to your orders. These service messages will not include any promotional content and do not require prior consent.

i.      To administer any of our prize draws or competitions which you enter, based on your consent given at the time of entering.

j.      To comply with our contractual or legal obligations to share data with law enforcement.

 

5. Legal Basis for Processing.  

Under UK and EU GDPR (General Data Protection Regulation), Cakesmiths will collect and process your personal data on one of the following legal bases:   To enter into and fulfil a contract: We will process your personal data to comply with our contractual obligations. For example, when you place an order with us for delivery, we’ll collect your contact details to enable us to deliver your purchase.   For our legitimate interests: Where the reason for processing your personal information is fair and lawful, Cakesmiths may rely on legitimate interests, for example, when we use your purchasing history to make available personalised offers or contact you regarding market research.   To comply with legal obligations: There may be situations where we need to use your information to comply with legal and regulatory obligations. For example, we may be required to pass on details of people involved in fraudulent activity to law enforcement.   Consent: In specific situations we collect and process your data with your consent, for example, where you tick a box to receive information about Cakesmiths products. Where Cakesmiths obtain your consent to process personal data, you have the right to withdraw that consent at any time. Consent can be withdrawn by using the facility at the bottom of each email you receive from Cakesmiths or by contacting us at the following email address, [email protected], with details of your request.   If have any further questions in relation to the legal basis on which Cakesmiths collects and uses your personal data please contact [email protected].

 

6. How your Personal Information Is Stored.  

Cakesmiths have appropriate technical and organisational measures in place to protect your personal data against unauthorised or unlawful processing or exposure, and against accidental loss, destruction, or damage. These include access control measures. All Cakesmiths employees and third parties are required to adhere to Cakesmiths Information Security Framework.   Your personal data is retained for as long as is necessary for the purposes set out in this Privacy Notice or while there is a legitimate reason for doing so. Thereafter, all personal data will be securely disposed of in line with Cakesmiths Data Retention Policy as outlined in the below table.   Data Retention Period. Purchase Information. When you place an order, we’ll keep the personal data you give us for up to 7 years so we can comply with our legal and contractual arrangements. Face to Face. We may keep notes about any conversations we have had, or details of a complaint you have made, for 1 year once the interaction has completed. Social media or enquiry information. Once the interaction has been completed, information will be retained for 1 year. Complaints Information. Complaints information will be retained for a period of 6 years from the date of the last contact. Subscription and Marketing requests. Until you tell us that you no longer wish to receive the subscription or marketing material. Cookies and analytical data. Cookie and analytical data are held for up to 6 months.

 

7. Sharing and Disclosing Your Information.  

Cakesmiths do not share or disclose your personal information without your written consent, other than for the purposes specified in this notice or where there is a legal requirement. Cakesmiths engages a number of third-party services to provide essential business functions. Please note, all processors acting on behalf of Cakesmiths are subject to due diligence and only process your personal data in accordance with instructions from us and comply fully with this Privacy Notice, UK Data protection laws and other appropriate security arrangements. Third parties your data is shared with:  

a.     Delivery companies engaged to deliver goods.

b.     IT Managed Services Provider which provides technical support services to Cakesmiths.

c.     Procurement Systems to enable us to process your order.

d.     Payment Services Providers to enable us to process your order.

e.     Customer Relationship Management (CRM) Providers to enable us to efficiently process your order.  

 

8. Your Data Protection Rights under GDPR.

The General Data Protection Regulation and the UK Data Protection Act 2018, provides you with 8 specific rights in relation to the data which is processed about you:

1.     Right to be informed: The right to be told how your personal data is used in clear and transparent language.

2.     Right of access: The right to know and have access to the personal data Cakesmiths holds about you.

3.     Right to data portability: The right to receive your data in a common and machine-readable electronic format.

4.     Right to be forgotten: The right to have your personal data erased.

5.     Right to rectification: The right to have your personal data corrected where it is inaccurate or incomplete.

6.     Right to object: The right to complain and to object to processing.

7.     Right to purpose limitation: The right to limit the extent of the processing of your personal data.

8.     Rights related to automated decision-making and profiling: The right not to be subject to decisions without human involvement.   If you have any questions about how Cakesmiths meets or supports your rights under the regulation or if you wish to exercise any of the above rights, please contact [email protected].

9. How To Complain.   If you have any concerns about Cakesmiths use of your personal information, you can make a complaint to [email protected] who is responsible for Data Protection within Cakesmiths.   You can also complain to the Information Commissioners Office (ICO) if you are unhappy with how we have used your data. The ICO’s address:   Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF   Helpline number: 0303 123 1113 ICO Website: https://www.ico.org.uk .

We will control the data you supply and we agree to collect and control this information in accordance with the Data Protection Act 1998 , (GDPR) (EU) 2016/679. Our contact information can be found on the contact page of our website.

We collect information from your visit to our site. This information is only used to track browsing patterns and cannot be used to identify you personally.

Cookies are small files that are stored on your computer when you visit a website. The text stored has a variety of uses and in some cases cookies are required for a website to function properly. A cookie may also be used to improve the visitors experience on a website. A good example of this is when you leave a website that you have logged into, then return back to it at a later stage, the cookie may allow you to remain logged in. The most common use of cookies is for the analysis of browsing patterns to find more detailed information about visitor trends. We use cookies to gather information about your visit, this information is collected in an anonymous form. Where there is a login process relating to buying products or services from us we also use cookies to store personal registration information so that you do not have to provide it to us again on subsequent visits. The rules regarding cookies have recently changed, and we have explained below how cookies are used on our website.

Cookie	Name	Purpose
Google Analytics More Info	_utma _utmb _utmc _utmz	These cookies are used to collect information about how visitors use our site. We use the information to analyse web traffic throughout our website. This helps us to improve our website and make information easier to find. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
Facebook More Info	c_user assorted others	These cookies are set by, and used by, Facebook. These cookies are used to identify your Facebook account (if you have one) so that when you click on a "Like" button it can associate that action with your specific Facebook account.
Twitter More Info	Assorted cookies	These cookies are set by, and used by, Twitter. These cookies are used to identify your Twitter account (if you have one) so that when you click on a "Tweet" button it can associate that action with your specific Twitter account.

If you would like to opt out of Google Analytics tracking cookies across all websites visit http://tools.google.com/dlpage/gaoptout

We will not be held responsible for any breach of security unless this is due to our negligence.

We accept no responsibility for content on web sites linked to from this site. Please let us know of any issues and we will immediately remove any external links from this site.

We will respect your privacy and ensure that all sensitive and personal information provided to us is lawfully processed and held in accordance to the Data Protection Act 1998, (GDPR) (EU) 2016/679.

Requests for information about our privacy statement can sent through our contact form. If you prefer to write to us, our address can be found on our contact page.