Privacy Policy — Sarah Bakes Cakes

Sarah Bakes Cakes ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you visit our website or use our online shop, why we collect it, and the cookies we use. It applies to this website and our online shop.

What information we collect

We collect information you give us directly:

Placing an order: your name, email address, phone number, and delivery address and postcode, or collection details if you're collecting from our kitchen in Haslemere.
Getting in touch: your name, email address, phone number (if you give it), and whatever details you share about your cake enquiry, when you use our contact form.
Payment: your card payment is handled entirely by our payment provider, Stripe. We never see or store your full card details on our own systems.

How we use your information

To process and fulfil your order, including arranging collection or delivery.
To contact you about your order — for example, to confirm details, discuss your cake design, or flag an issue.
To remember your checkout details for 30 days so you don't need to re-enter them on your next visit, if you choose to check out.
To respond to enquiries made through our contact form.
To meet our legal obligations, for example keeping order records for accounting purposes.

We do not sell or rent your personal data to third parties, and we do not currently use your data for analytics or advertising.

Cookies we use

Cookies are small text files stored on your device. We use the following cookies, all of which are required for the website and shop to work correctly:

Cookie	Purpose	Duration
Session cookie (`PHPSESSID`)	Keeps track of the items in your basket while you browse the shop, and keeps you securely signed in if you're an admin user.	Until you close your browser
`sbc_customer`	Remembers your contact and delivery details after checkout, so you don't have to re-enter them next time.	30 days
`sbc_consent`	Remembers your cookie preference so we don't show the cookie banner on every visit.	1 year

We do not currently use any analytics or marketing/advertising cookies. If that changes in future, we'll ask for your consent via the cookie banner before any such cookies are set, and you'll be able to manage your preference there at any time.

Sharing your information

We share the minimum information necessary with:

Stripe — to process card payments securely. See Stripe's privacy policy.
Our website hosting provider, who stores order and account data on our behalf.

We don't run any advertising or social media tracking pixels on this site.

How long we keep your data

We keep order records for as long as required for accounting and tax purposes. The sbc_customer convenience cookie expires automatically after 30 days. You can ask us to delete your data at any time, subject to our legal obligation to retain order records.

Your rights

Under UK GDPR, you have the right to:

Ask what personal data we hold about you and receive a copy of it.
Ask us to correct inaccurate data.
Ask us to delete your data, where we're not required to keep it.
Object to, or ask us to restrict, how we use your data.
Withdraw consent for cookies at any time by clearing the sbc_consent cookie or contacting us.

You also have the right to complain to the Information Commissioner's Office (ICO) if you have concerns about how we handle your data.

Contact us

If you have any questions about this policy or your data, contact us at info@sarahbakescakes.co.uk or via Facebook.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.