Privacy Policy

Privacy Policy
Last updated: September 2026
Cake Face (“we”, “us”, “our”) respects your privacy and is committed to protecting the personal information you provide when using our website, placing an order or contacting us.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we may share it with and your rights in relation to your personal information.

1. Who we are
Cake Face is a sole-trader food business based in Birmingham, United Kingdom.
For data protection purposes, Cake Face is the data controller responsible for your personal information.
Email: cakefaceuk.sarbakes@gmail.com
If you have any questions about how we use your personal information, please contact us using the email address above.

2. What information we collect
Depending on how you interact with Cake Face, we may collect some or all of the following information:
• Your name.
• Email address.
• Telephone number, where provided.
• Billing and delivery address.
• Order details, including products purchased, order dates and delivery or collection arrangements.
• Information provided when making a bespoke cake enquiry.
• Communications between you and Cake Face, including emails and messages relating to your order.
• Payment and transaction information. Payment card details are processed through the relevant payment provider and are not intentionally stored by Cake Face.
• Information relating to allergies or dietary requirements where you choose to provide this information.
• Information about the intended recipient of an order where you provide it to us.
• Technical information relating to your use of our website, including information collected through cookies and similar technologies.
We only collect information that is reasonably necessary for the purposes described in this Privacy Policy.

3. How we use your information
We may use your personal information to:
• Process and fulfil your orders.
• Arrange delivery or collection of your order.
• Contact you about your order.
• Respond to enquiries, including bespoke cake enquiries.
• Assess whether we are able to safely fulfil an order where allergy information has been provided.
• Process payments and maintain appropriate financial records.
• Deal with complaints, refunds, delivery issues or other matters relating to an order.
• Meet our legal and regulatory obligations.
• Maintain appropriate business and tax records.
• Improve the operation and security of our website.
• Respond to requests concerning your personal information.
• Send marketing communications where you have provided the appropriate consent.
We will not use your personal information for unrelated purposes without explaining this to you and, where required, obtaining your consent.

4. Lawful basis for using your information
We will only use your personal information where we have a lawful basis to do so under applicable data protection law.
Depending on the circumstances, this may include:
Contract
We may process your information because it is necessary to take payment, process and fulfil an order, arrange delivery or collection, or communicate with you about an order.
Legal obligation
We may process and retain certain information where necessary to comply with legal, accounting or tax obligations.
Legitimate interests
We may process information where this is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
This may include responding to general enquiries, maintaining business records, protecting our website and business, preventing misuse and dealing with complaints or disputes.
Consent
Where we ask for your consent for a particular use of your information, you are free to withdraw that consent at any time.
Where consent is used, we will explain what you are consenting to and how you can withdraw your consent.

5. Allergy and health information
We take allergies and food safety seriously.
At checkout, we ask whether the customer or intended recipient has any allergies or other relevant dietary concerns so that we can contact the customer where further information is required.
Information about a person's allergies is health information and may therefore constitute special category personal data under UK data protection law.
Where we process allergy information, we will only use it for the specific purposes for which it has been provided, including assessing whether an order can be safely prepared and fulfilled.
We will not use allergy information for marketing or unrelated purposes.
Where explicit consent is required for processing allergy information, we will request this separately and clearly.
If the allergy information indicates that we cannot safely prepare an order, we may contact you to discuss the circumstances and may decline the order where we reasonably consider this necessary for food safety.
Please only provide information about another person, including an intended recipient, where you are authorised to provide that information to us.

6. Payment information
Payments made through our website are processed using the payment services made available through our website.
We do not intentionally retain full payment card details.
Payment providers may collect and process your information in accordance with their own privacy policies and terms.
We may retain transaction information such as the date, amount paid and order details for accounting, tax, legal and business-record purposes.

7. Delivery information
Where you place an order for delivery, we may share the information necessary to fulfil your order with the delivery provider.
This may include your name, delivery address, telephone number and information required to identify or track your parcel.
We only provide the information reasonably necessary to arrange and complete delivery.

8. Information shared with third parties
We may share relevant personal information with trusted third parties where necessary to operate Cake Face and provide our services.
These may include:
• Wix, which provides our website and associated website services.
• Payment service providers.
• Delivery and postal service providers.
• Website, technical and security service providers.
• Professional advisers, accountants or insurers where reasonably necessary.
• Government bodies, regulators, law enforcement or other authorities where we are legally required to do so.
We do not sell your personal information.
Where third-party service providers process personal information on our behalf, we take reasonable steps to ensure that appropriate data protection arrangements are in place.
Some service providers, including website and technology providers, may process information outside the United Kingdom. Where this occurs, appropriate safeguards will be used where required by applicable data protection law.

9. Wix and website information
Our website is hosted and operated using Wix.
Wix may process information relating to visitors and customers in order to provide website functionality, security, online ordering and other services.
Wix may also use cookies and similar technologies as described in our Cookie Policy and through the cookie consent tools available on our website.
Third-party applications or integrations connected to our Wix website may also collect information. Where applicable, those providers will have their own privacy policies governing their use of information.

10. Cookies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function, including features such as security, website operation and the online shopping basket.
Where we use non-essential cookies, such as analytics or marketing cookies, we will seek consent where required.
You can manage your cookie preferences using the cookie settings available on our website.
Please note that disabling certain cookies may affect the functionality of some parts of the website.

11. Marketing
We will only send you direct marketing communications where we have a lawful basis to do so.
Where marketing is based on consent, you can withdraw your consent at any time.
You can unsubscribe from marketing communications by using the unsubscribe facility provided in the communication or by contacting us at:
cakefaceuk.sarbakes@gmail.com
We do not sell or rent customer information to third parties for their own marketing purposes.

12. How long we keep your information
We do not keep personal information for longer than is reasonably necessary for the purpose for which it was collected.
Different information may be retained for different periods.
Order and financial records
We retain relevant order, payment and financial records for as long as reasonably necessary to fulfil our legal, tax and accounting obligations.
Allergy information
Allergy and health information will only be retained for as long as reasonably necessary to assess and fulfil the relevant order and deal with any related complaint, food-safety issue or legal matter.
Once it is no longer reasonably necessary, it will be securely deleted or otherwise disposed of.
Enquiries
Information relating to general enquiries or bespoke cake enquiries will normally be retained only for as long as reasonably necessary to respond to the enquiry and deal with any resulting order or matter.
Marketing information
Where you have consented to receive marketing communications, we will retain the relevant information until you withdraw your consent or it is no longer necessary for the relevant marketing purpose.
We may retain information for longer where this is necessary to establish, exercise or defend legal claims or to comply with a legal obligation.

13. Keeping your information secure
We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
However, no online transmission or electronic storage system can be guaranteed to be completely secure.

14. Your data protection rights
Depending on the circumstances and the applicable legal requirements, you may have rights including:
• The right to request access to the personal information we hold about you.
• The right to request correction of inaccurate or incomplete information.
• The right to request deletion of your personal information in certain circumstances.
• The right to request restriction of processing in certain circumstances.
• The right to object to certain processing.
• The right to data portability where applicable.
• The right to withdraw consent where we rely on consent as our lawful basis.
• Rights relating to automated decision-making and profiling where applicable.
These rights are not absolute and certain legal exceptions may apply.
To exercise your rights, please contact:
cakefaceuk.sarbakes@gmail.com
We may need to verify your identity before responding to a request in order to protect your personal information.

15. Withdrawing consent
Where we rely on your consent to process personal information, you may withdraw your consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew your consent.
Please note that where certain information is necessary to fulfil an order or comply with a legal obligation, withdrawing consent may not prevent us from continuing to process that information where another lawful basis applies.

16. Complaints
If you have concerns about how we have handled your personal information, please contact Cake Face first at:
cakefaceuk.sarbakes@gmail.com
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information about making a complaint is available through the ICO's website.

17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or applicable data protection requirements.
The latest version will always be made available on our website.

Last updated: September 2026