Privacy Policy

Effective Date: 19/05/2025

At Melvin’s Bakery, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, and protect any information you provide to us in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Information We Collect

We may collect and process the following types of personal data:

  • Name and contact details (e.g., email address, phone number, delivery address)

  • Order and payment information

  • Preferences or dietary requirements (if shared)

  • Information from forms (e.g., newsletter sign-ups or contact requests)

2. How We Use Your Data

We use your personal information to:

  • Process and deliver your orders

  • Respond to enquiries or customer service requests

  • Send you updates or marketing (only with your consent)

  • Maintain records for business and legal purposes

3. Lawful Basis for Processing

We only process your personal data when we have a lawful basis to do so, such as:

  • To fulfil a contract (e.g., fulfilling your order)

  • With your consent (e.g., for marketing)

  • To comply with legal obligations (e.g., tax or accounting requirements)

4. How We Store and Protect Your Data

Your information is stored securely and only for as long as necessary. We implement suitable security measures to protect it from unauthorised access, alteration, or disclosure.

5. Sharing Your Data

We never sell your data. We may share it with trusted service providers (e.g., payment processors or delivery partners) strictly for business operations. These third parties are also bound by data protection obligations.

6. Your Rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you

  • Request correction or deletion

  • Object to or restrict processing

  • Withdraw consent for marketing

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, contact us at: [insert contact email]

7. Cookies

If our website uses cookies, we’ll inform you and request your consent when necessary. You can manage cookie preferences through your browser settings.

8. Contact Us

If you have any questions about this policy or your data, please contact:

Melvin’s Bakery

24 Paddington St, W1U5QY

contact@melvinsbakery.co.uk

GDPR Privacy Notice

Effective Date: 18/05/2025

Melvin’s Bakery is committed to protecting your personal data and respecting your privacy. This GDPR notice explains your rights and how we collect, use, and store your data, in compliance with the General Data Protection Regulation (EU) 2016/679.

1. Who We Are

Melvin’s Bakery

Email: melvin@melvinsbakery.com

[Optional: Address or contact form link]

We are the data controller for the information you share with us.

2. What Personal Data We Collect

We may collect and process the following:

  • Your name, email address, phone number

  • Delivery address and billing information

  • Purchase history

  • Communications and feedback

  • Cookies and usage data (via your browser)

3. Why We Collect Your Data

We use your data to:

  • Process and deliver your orders

  • Communicate about your purchases

  • Send updates or promotions (if you consent)

  • Improve our website and customer experience

4. Legal Bases for Processing

We process your data under one or more of the following legal grounds:

  • Contractual necessity (e.g. fulfilling your order)

  • Consent (e.g. email marketing)

  • Legitimate interest (e.g. site analytics)

  • Legal obligation (e.g. tax compliance)

5. How Long We Keep Your Data

We retain your personal data only as long as needed:

  • Order information: kept for up to 6 years (legal requirement)

  • Email subscriptions: until you unsubscribe

  • Analytics data: retained per cookie policy

6. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct any inaccuracies

  • Request deletion of your data (“right to be forgotten”)

  • Restrict or object to certain uses

  • Request data portability

  • Withdraw consent at any time

To exercise these rights, contact: contact@melvinsbakery.co.uk.

7. Sharing Your Data

We only share your data with trusted services:

  • Payment processors (e.g. Stripe, PayPal)

  • Delivery partners

  • Website hosting and analytics providers

We never sell or rent your data.

8. International Transfers

If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or transfer to countries with adequacy decisions.

9. Cookies

We use cookies to enhance your website experience. You can manage cookie preferences via your browser settings or view our full [Cookie Policy].

10. Complaints

If you’re concerned about how we handle your data, you can contact your local Data Protection Authority or reach out to us directly at contact@melvinsbakery.co.uk.