Privacy Policy

Cakelin is a private limited company registered in England and Wales, with its registered office at CAKELIN LTD, 51 Monk Bridge Road, Meanwood, Leeds, LS6 4EP. Company registration number 14704498.

We are committed to safeguarding the privacy of our website visitors. This policy explains how we treat personal information.

This policy applies only to your use of the Cakelin website. Our site may link to other websites. We do not control how those websites collect, store or use data, so please read their privacy policies before providing information.

Personal data is information relating to an identifiable person who can be directly or indirectly identified, including obvious information such as your name and contact details and less obvious information such as identifiers, electronic location data and online identifiers.

Under UK data-protection law, your rights include being informed about collection and use; accessing the data we hold; correcting inaccurate or incomplete data; asking us to erase data where the law allows; restricting processing; objecting to particular uses; data portability in applicable cases; and rights concerning automated decision-making and profiling.

Contact us to exercise these rights. Further information is available from the Information Commissioner’s Office or Citizens Advice. You may complain to the Information Commissioner’s Office if you are concerned about our use of your personal data.

Depending on how you use the site, we may collect contact details, account information, order and payment references, delivery or collection details, enquiry content, inspiration images, preferences and communications.

Our systems may also collect service-related log and usage data, including IP address, device information, browser type and settings, timestamps, pages and files viewed, searches, feature use, system activity and error reports.

Device data may include device and application identifiers, operating system, browser, hardware model, internet provider or mobile carrier and system configuration. Approximate location may be inferred from an IP address or a postcode supplied for delivery. We do not require precise GPS access for ordinary site use.

We must have a lawful basis for processing personal data. Depending on the context, this may be performance of a contract, consent, compliance with a legal obligation or our legitimate business interests.

We use data to supply and personalise products and services; create and manage accounts, orders, bookings, payments, collection and delivery; respond to enquiries and communications; prevent fraud and protect the site; maintain business and accounting records; and improve site reliability and customer experience.

With permission, or where otherwise permitted by law, we may send marketing information, news or offers. We will not send unlawful marketing or spam and will provide a way to opt out.

We keep personal data only for as long as needed for the purpose for which it was collected. Customer and order information may be retained for seven years from collection or the last relevant interaction for statutory accounting purposes. Fraud-prevention records may be retained for a period proportionate to the transaction and risk.

Some service providers may store or process data outside the UK. Where this happens, we take appropriate steps required by law to protect the data, such as using adequacy regulations, approved contractual safeguards or another lawful transfer mechanism.

We may process or share data where you have consented; where it is reasonably necessary for our legitimate interests; to perform a contract; to comply with law, legal process or a court order; or to investigate fraud, policy breaches, unlawful activity or threats to safety.

We also use trusted service providers to operate the website, database, authentication, payments, email and hosting. They receive only the information needed to provide their service and must handle it under their own legal and contractual obligations.

You can browse many areas of the site without supplying personal data. Information is required where it is necessary to create an account, place an order, book a consultation, request delivery or submit an enquiry.

Necessary cookies support essential functions such as security, authentication, baskets and checkout. Optional analytics or marketing cookies are used only according to the choices shown in Cookie Preferences.

Some browsers provide a Do-Not-Track signal, but no uniform standard requires all sites to respond in the same way. Use our Cookie Preferences control to manage optional cookies on this site.

You may ask for details and a copy of personal data we hold about you by making a subject access request in writing using the contact details below. There is normally no charge, although a reasonable fee may be charged for a request that is manifestly unfounded or excessive.

We normally respond within one month. In complex cases, the law may allow an extension of up to two further months, and we will explain if this applies.

For questions about personal data, to exercise a right or to make a subject access request, contact the Data Protection Officer at info@cakelin.co.uk, or write to 51 Monk Bridge Road, Meanwood, Leeds, LS6 4EP.

We may update this policy when the law or our business changes. Updates will be posted on this site and apply from the date shown or from your next use of the site.