Privacy Policy for Winterveil Bakes

At Winterveil Bakes, we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage with our services, or attend our workshops. We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.

1. Information We Collect

We may collect personal information from you in a variety of ways when you interact with our online platform or services, including:

• Information you provide directly to us: This includes details such as your name, email address, postal address, phone number, and payment information when you place an order for bespoke cakes, gourmet pastries, book a baking class, or make an inquiry. If you engage us for catering or bespoke services, we may also collect details about your event requirements to fulfill your request.
• Information collected automatically: When you visit our site, we may automatically collect certain information about your device, including your IP address, browser type, operating system, referring URLs, and how you interact with our pages. This is primarily done through cookies and similar tracking technologies.
• Information from third parties: In certain circumstances, we may receive information about you from third parties, such as payment processors or analytics providers, always in compliance with applicable laws.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• To fulfill your orders and requests: Processing bespoke cake orders, catering services, class bookings, and delivering products.
• To communicate with you: Sending order confirmations, updates, information about our services, and responding to your inquiries.
• To improve our services: Analyzing website usage and customer preferences to enhance our product offerings, website functionality, and overall customer experience.
• For marketing and promotional purposes: With your consent, we may send you newsletters, special offers, or information about new products and workshops.
• To comply with legal obligations: Including tax, accounting, and other legal requirements.

3. Legal Basis for Processing Personal Information

We process your personal information based on the following legal grounds:

• Performance of a contract: When processing is necessary to fulfill orders or provide services you have requested.
• Legitimate interests: For improving our website, marketing our services (where compatible with your rights), and preventing fraud.
• Consent: Where we ask for your explicit consent to process your data for specific purposes, such as sending marketing communications.
• Legal obligation: When processing is necessary to comply with a legal or regulatory obligation.

4. Disclosure of Your Information

We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:

• Service providers: Such as payment processors, delivery services, and IT support, who assist us in operating our business. These providers are bound by strict contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
• Legal and regulatory authorities: When compelled by law, or to protect our rights, property, or safety.

Any data transfer outside the European Economic Area (EEA) will be done in compliance with UK GDPR requirements, ensuring appropriate safeguards are in place.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. Please contact us at the address provided below if you wish to exercise any of these rights.

7. Cookies

Our site uses cookies to enhance your browsing experience, analyze site traffic, and for advertising purposes. Cookies are small data files placed on your device. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our site may become inaccessible or not function properly.

8. Security of Your Information

We employ appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. We regularly review our security procedures to ensure we maintain a high level of data protection.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Winterveil Bakes

7 Arctic Way, Unit 3B,

Edinburgh, Scotland, EH6 6LU

United Kingdom