This policy explains how [BUSINESS / LEGAL ENTITY NAME], trading as Jo's Buns, Bakes and Cakes ("we", "us"), collects and uses your personal information when you use this website or get in touch with us. It applies under the UK GDPR and the Data Protection Act 2018.
1. Who we are
We are the data controller for the personal information described in this policy.
- Business / legal entity: [BUSINESS / LEGAL ENTITY NAME] (trading as Jo's Buns, Bakes and Cakes)
- Company number: [COMPANY NUMBER]
- Registered address: [REGISTERED ADDRESS]
- Contact email: josephinepurvis95@icloud.com
- Contact phone: +447933078500
2. Data we collect
When you send an enquiry or order request through our form, or contact us in another way, we collect:
- your name, email address and phone number
- the date you need your order or event date
- what you would like (items, number of people, collection or delivery) and any notes you add
- your preferred contact method
If you tell us about allergies or dietary needs, we use that information only to prepare your order safely. Please only share what we need to know.
We do not ask for payment card details through this website. If you press Accept on the cookie banner, we use Microsoft Clarity to understand how visitors use the site. See our Cookie Policy.
3. Lawful basis for processing
- Contract: we use your details to respond to your request and to fulfil an order you ask us to make.
- Legitimate interests: we use your details to respond to enquiries and keep sensible records of our business. We have considered that this does not override your rights.
- Consent: we rely on your explicit consent for marketing messages and for any allergy information you choose to give us. You can withdraw consent at any time.
- Legal obligation: where you place an order, we keep the records we are required to keep for accounting and tax.
4. How we use and store your data
We use your information to reply to your enquiry, confirm flavours, dates and prices, prepare and hand over or deliver your order, and keep a record of our conversations. We do not sell your personal information.
Retention: we keep general enquiries for 12 months after our last contact, or until you ask us to delete them, whichever is sooner. Basic order and payment records are kept for as long as the law requires for accounting purposes. Your information is stored in our email and customer management systems, and access is limited to people who need it to deal with your request.
5. Third-party processors
We use trusted providers to run this website and manage enquiries. They handle your information on our instructions:
- Website hosting and security: Cloudflare
- Customer management and form submissions (CRM and webhooks): GoHighLevel
- Website analytics (only if you accept cookies): Microsoft Clarity
- Social media: you can find us on Facebook. If you contact us there, Meta's own privacy policy applies to that conversation.
Some providers may process information outside the UK. Where they do, appropriate safeguards are used to protect it.
6. Marketing communications
We only send marketing messages, such as news of seasonal menus or offers, if you have told us you would like to hear from us. We do not share your details with other businesses for their marketing.
You can opt out at any time by using the unsubscribe link in a message, replying to ask us to stop, or emailing josephinepurvis95@icloud.com. We may still contact you about an order you have placed.
7. Your rights under UK GDPR
You have the right to:
- ask for a copy of the personal information we hold about you (access)
- ask us to correct information that is wrong (rectification)
- ask us to delete your information (erasure)
- ask us to limit how we use it (restriction)
- ask us to move it to you or another organisation (portability)
- object to us using it for our legitimate interests or for marketing
- withdraw your consent at any time, where we rely on it
To use any of these rights, email josephinepurvis95@icloud.com. We will reply within one month.
If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.