General Information
This privacy policy sets out what to expect when Alexandra Hughes Cake Design collects personal information about you in order to provide my service.
In using this website and these services you are agreeing that your personal information can be collected and used as noted in this privacy policy.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information is because I have a contractual obligation.
The type of personal information I collect and why I have it
Most of the personal information I process is provided to me directly by you. I collect and process the following information:
- Name, partner’s name and email address (and phone number and address where necessary) for communication, billing, production and delivery of your cake order.
- Other personal information you provide about you, or someone else related to the cake order, which is necessary for the production and personalisation of your cake (for example any food allergies, dietary requirements/preferences, birth dates, ages, details of anniversaries, photographs if you require edible reproductions etc.)
- Photographs that you or your photographer may provide of you and your cake for me to use on my website and social media for marketing purposes – your express permission will be requested beforehand.
- Your bank details – only for the purposes of returning cake stand deposits or other refunds as necessary. Only your account name and reference are received when you pay by bank transfer or Stripe.
I use the information that you have given me in order:-
- To communicate with you regarding your cake order (for example discussing and quoting for your cake order, invoicing and delivery)
- To collect feedback to improve my service.
- To send you communications required by law or which are necessary to inform you about changes to the services I provide.
- To comply with my contractual or legal obligations to share data with law enforcement.
- If you have chosen to subscribe to my mailing list, then your information is used in order to send newsletters and other mailing. Please note that you can unsubscribe from this list at any time.
Third Parties
- I do not share personal data with any third parties, bodies or organisations without your consent.
- I will not sell or rent your information to third parties.
- I use Stripe as a third party payment processor who specialise in the secure online capture and processing of credit/debit card transactions. Their privacu policy can be viewed on their website.
- My site contains external links to other sites not operated by my. If you click on a third party link you will be redirected to that third party’s site. I assume no responsibility for the security, content or privacy policies of any third party site.
Cookies
A cookie is a small text file that is downloaded onto your computer or mobile device when you accesses a website. It allows the website to recognise your device and store some information about your preferences or past actions.
This website uses essential cookies to make the website work also non-essential cookies (with your consent) to improve your user experience on this website and analyse website traffic. These non-essential cookies collect non-identifying statistical data which do not contain personal details and which I cannot see. Cookies can be turned off on your browser.
How I store your personal information
Your information is stored on my password-encrypted laptop, password-encrypted secure cloud servers and paper records (for example order forms, invoices, diary entries, notes I take when we speak).
Examples of stored records of communication between us on secure servers include messages sent through my website, email messages, social media messages (e.g. Facebook and Instagram). This website is https secure and Alexandra Hughes Cake Design is GDPR compliant.
I keep your details, records of your order and our communication records for as long as I genuinely need it and in line with government record keeping guidelines for accounting purposes. I will then destroy or delete any of your personal information that I hold either electronically or on paper and I make every reasonable effort to do so in secure circumstances.
Your data protection rights
Under data protection law, you have rights including:
- Your right of access – You have the right to ask me for copies of your personal information.
- Your right to rectification – You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
- Your right to erasure – You have the right to ask me to erase your personal information
- Your right to restriction of processing – You have the right to ask me to restrict the processing of your personal information
- Your right to data portability – You have the right to ask that I transfer the personal information you gave me to another organisation, or to you
Please contact me at alex@alexandrahughescakedesign.co.uk if you wish to make a request.
I may not be able to comply with requests to delete data where the following apply and I will advise you of this as necessary:-
- You have an open order which has not yet been completed/delivered
- You have an unsettled debt
- Where I am required to keep records relating to financial transactions for accounting purposes or other legal reasons
How to complain
If you have any concerns about my use of your personal information, you can make a complaint to me at alex@alexandrahughescakedesign.co.uk
You can also complain to the ICO if you are unhappy with how I have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
My contact details:
Name: Alexandra Hughes
Address: 28 Clara Street, Ton Pentre, Pentre, CF41 7HQ, United Kingdom
Phone Number: +44(0)7501 549 212
E-mail: alex@alexandrahughescakedesign.co.uk
Privacy Policy Last Updated February 2023
