Privacy Policy

What we collect

• Order information — your name, email address, and phone number when you place an order. This is provided directly to Stripe (our payment processor) and passed to us to fulfil your order.
• Delivery address — only if you choose delivery.
• Email address — if you voluntarily sign up to our mailing list.
• Order notes — any special requests you include with your order.

How we use it

• To fulfil and communicate about your order
• To send occasional updates if you have subscribed to our mailing list
• We do not sell, share, or pass your data to any third party other than Stripe for payment processing

Stripe

Payments are processed by Stripe. When you pay, your card details go directly to Stripe — we never see or store them. Stripe is PCI-DSS compliant. You can read Stripe's privacy policy at stripe.com/privacy.

Cookies & local storage

We use your browser's local storage to remember your basket between visits. This stays on your device and is not sent to us. We do not use tracking or advertising cookies.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Ask us to delete your data
• Unsubscribe from the mailing list at any time

To exercise any of these rights, email us at info@babycakesbakery.co.uk.

Data retention

Order records are kept for up to 7 years for accounting purposes, in line with HMRC requirements. Mailing list emails are held until you unsubscribe.