Privacy Policy - 29/09/2026

 

  • This website is run by The Larches Bakery ("we", "us", "our"), a home bakery based in Nuneaton, England. We are the "data controller" for the personal information described in this policy.

    Contact: thelarchesbakery@gmail.com

  • Depending on how you use our site, we may collect:

    • Contact details: your name, email address, phone number and delivery address when you place an order, submit an enquiry form or contact us.

    • Order details: what you ordered, collection or delivery dates, and any custom requests (for example, names or messages for a cake).

    • Allergy and dietary information: if you tell us about allergies or dietary requirements so we can prepare your order safely. This may be health-related information, which we treat with extra care.

    • Payment information: payments are processed by [Squarespace Payments (powered by Stripe) / PayPal / other]. We do not see or store your full card details.

    • Newsletter details: your name and email address if you sign up to our mailing list.

    • Website usage data: your IP address, browser type, device, pages visited and similar information, collected through cookies and Squarespace Analytics.

    • Photos or messages: anything you choose to send us, for example a reference image for a cake design.

    • Purpose: Taking, preparing and delivering your order. Our legal basis: Contract (fulfilling what you asked us to do).

    • Purpose: Handling allergy and dietary requirements safely. Our legal basis: Explicit consent, and our legal duty to provide accurate allergen information.

    • Purpose: Replying to your enquiries. Our legal basis: Legitimate interests (responding to you).

    • Purpose: Keeping business and tax records. Our legal basis: Legal obligation.

    • Purpose: Sending our newsletter or promotions. Our legal basis: Consent (you can withdraw it at any time).

    • Purpose: Understanding how our website is used. Our legal basis: Consent (via our cookie banner).

      We do not sell your personal information.

  • We only share your information where needed to run the business, with:

    • Squarespace, who host our website and store information submitted through it, such as orders and form submissions

    • Payment processors: [Stripe / PayPal / other]

    • Email services: Squarespace Email Campaigns for our newsletter, and Gmail for our business email.

    • Delivery or courier services, if applicable: Royal Mail.

    • Our accountant or bookkeeper

    • Authorities, if we are legally required to

    These providers only receive what they need to do their job and must protect it. Squarespace and some of our other providers are based in, or process data in, the United States and other countries outside the UK. Where this happens, we rely on appropriate safeguards, such as the UK's approved data transfer mechanisms, to protect your information.

    • Order and payment records: 6 years, as required for tax and accounting purposes.

    • Allergy information: only as long as needed to fulfil your order, then deleted.

    • Enquiries: 12 months.

    • Newsletter details: until you unsubscribe.

  • Our website uses cookies. Essential cookies make the site work, for example keeping items in your basket. With your consent, we also use analytics cookies to understand how the site is used. Embedded content, such our google maps embed, may also set third-party cookies.

    When you first visit, our cookie banner lets you accept or decline non-essential cookies. You can change your choice at any time through your browser settings.

  • Under UK data protection law, you have the right to:

    • Access the personal information we hold about you

    • Have inaccurate information corrected

    • Have your information erased, in certain circumstances

    • Restrict or object to how we use your information

    • Withdraw consent at any time (for example, by unsubscribing from emails)

    • Receive your information in a portable format, in certain circumstances

    To use any of these rights, email us at thelarchesbakery@gmail.com. We'll respond within one month.

  • We take reasonable steps to protect your information, including using secure, password-protected accounts, limiting who can access customer details, and relying on Squarespace's secure hosting and encrypted (HTTPS) connections. No online system is completely secure, but we work to keep your data safe.

  • Our website is not aimed at children under 13, and we do not knowingly collect their personal information.

  • We are on Instagram and Facebook, and our site may link to or display content from those platforms. When you interact with them, their own privacy policies apply, and we are not responsible for their practices. If you message us through social media, we'll use your details only to reply and to fulfil any order you ask for.

  • If you're unhappy with how we've handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

  • We may update this policy from time to time. The latest version will always be on this page, with the date at the top.