Privacy Policy

Last updated: 02/07/2026
 

This Privacy Policy explains how The Sunday Bakehouse ("we", "us", "our") collects, uses, and shares your personal information when you visit or make a purchase from our website (the "Site").
 

We are the data controller for your personal information under applicable law, including the UK GDPR and the Data Protection Act 2018.
 

Who we are & how to contact us

Business name: The Sunday Bakehouse

Email: thesundaybakehouse1@gmail.com

Postal address: Peterborough, England, PE4 7ER, UK

If you are not satisfied with our response, you can complain to the ICO at ico.org.uk.

Information we collect
 

We collect the following categories of data:

• Identity & Contact: name, email address, phone number and collection address where applicable.

• Order Details: products purchased, customisation requests and gift messages.

• Payment Information: payment method details processed securely by our payment providers. We do not store full card numbers.

• Account Information: login details, saved preferences and order history.

• Marketing Preferences: newsletter subscriptions and communication preferences.

• Communications: messages sent through email, contact forms or social media.

• Technical & Usage Information: IP address, browser type, device information, pages visited, time spent on the Site, referral sources, approximate location and cookie data.

• Reviews & User Content: product reviews, ratings and photographs submitted by customers.
   

How we collect your information

We collect information:

• Directly from you when you browse the Site, place an order, contact us or subscribe to our newsletter.

• Automatically through cookies and similar technologies when you interact with the Site.

• From third parties such as payment providers, website hosting services, analytics providers and marketing platforms.

Why we use your information

We process personal data for the following purposes:

To provide our services

To process orders, accept payments, arrange collections and provide customer support.

Legal basis: Contract
 

Customer service and account management

To respond to enquiries, manage customer accounts and maintain records.

Legal basis: Contract and Legitimate Interests

Website improvements and analytics

To understand how visitors use our Site and improve functionality and user experience.

Legal basis: Legitimate Interests
 

Marketing communications

To send newsletters, updates and promotional content where you have consented to receive them.

Legal basis: Consent and Legitimate Interests

Fraud prevention and security

To protect our business, customers and website.

Legal basis: Legitimate Interests and Legal Obligation

Legal and regulatory obligations

To comply with tax, accounting and legal requirements.

Legal basis: Legal Obligation
 

Sharing your information

We may share your information with trusted third parties who help us operate our business, including:

• Website hosting and ecommerce providers

• Payment processors

• Email marketing platforms

• Analytics providers

• Professional advisers such as accountants, legal advisers and IT support

• Regulatory authorities where required by law

We do not sell your personal information.

International transfers

Some service providers may process information outside the UK or EEA. Where this occurs, appropriate safeguards such as Standard Contractual Clauses or equivalent protections are used.
 

Data retention

We retain personal information only for as long as necessary, including:

• Orders and invoices: up to 6 years for tax and legal purposes.

• Customer accounts: while active and for a reasonable period thereafter.

• Marketing subscriptions: until you unsubscribe or are removed due to inactivity.

• Customer enquiries: typically up to 24 months unless longer retention is required.
   

Your rights

Under UK data protection law, you have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion of your data where applicable

• Restrict or object to processing

• Request data portability

• Withdraw consent for marketing communications at any time

To exercise your rights, please contact us using the details below.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
 

Marketing

We only send marketing communications where you have consented or where permitted by law.

You can unsubscribe at any time by:

• Clicking the unsubscribe link in our emails

• Contacting us directly
   

Cookies

We use cookies and similar technologies to:

• Ensure the Site functions correctly

• Remember your preferences

• Analyse website performance

• Improve user experience

• Measure the effectiveness of marketing activities

Types of cookies we may use include:

• Essential cookies

• Performance and analytics cookies

• Marketing cookies

You can manage your cookie preferences through our cookie banner or browser settings.
 

Children

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us so we can remove it.
 

Security

We use appropriate technical and organisational measures to protect personal information, including secure website connections and restricted access controls. However, no method of electronic transmission can be guaranteed to be completely secure.
 

Third-party websites

Our Site may contain links to other websites. We are not responsible for the privacy practices of external sites and encourage you to review their policies separately.
 

Automated decision-making

We do not make decisions that have legal or similarly significant effects based solely on automated processing. Basic fraud prevention and order verification checks may take place.
 

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised "Last updated" date.
 

Contact Us

If you have any questions about this Privacy Policy or how your personal information is handled, please contact us:

Email: thesundaybakehouse1@gmail.com

Address: Peterborough, England, PE4 7ER, UK