Privacy Policy

Last Updated: 7 August 2026

Introduction

Cakefully Heaven (“we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal information is handled responsibly.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit www.cakefullyheaven.co.uk, purchase our products, create an account, subscribe to our services or otherwise interact with us.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws.


Who We Are

Cakefully Heaven

Website: www.cakefullyheaven.co.uk

Email: carina@cakefullyheaven.co.uk

Business Address: 18 Bovinger Way, Southend-on-Sea SS1 3SZ

If you have any questions about this Privacy Policy or how your data is used, please contact us using the details above.


Information We Collect

We may collect and process the following information:

Personal Information

When you place an order, create an account or contact us, we may collect:

  • Name
  • Billing address
  • Delivery address
  • Email address
  • Telephone number
  • Date of birth (if voluntarily provided)
  • Order history
  • Communication preferences

Account Information

If you create an account, we may store:

  • Username
  • Encrypted password
  • Saved addresses
  • Order history
  • Wishlist (if enabled)
  • Subscription information
  • Account preferences

You are responsible for keeping your password secure.


Subscription Information

If you purchase a subscription product, we may collect:

  • Subscription status
  • Renewal dates
  • Products subscribed to
  • Delivery schedule
  • Payment status
  • Cancellation information

Recurring payments are processed securely by our payment provider. Cakefully Heaven does not store your full payment card details.


Payment Information

Payments are processed through secure third-party payment providers such as:

  • Stripe
  • PayPal
  • WooPayments

These providers process your payment information securely in accordance with their own privacy policies.

We never store your full debit or credit card details.


Technical Information

When you browse our website we may automatically collect:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Pages visited
  • Time spent on pages
  • Referring website
  • Cookie information

How We Use Your Information

We use your information to:

  • Process and deliver your orders
  • Manage your online account
  • Process recurring subscriptions
  • Provide customer support
  • Send order confirmations
  • Send delivery updates
  • Process refunds
  • Prevent fraud
  • Improve our website
  • Respond to enquiries
  • Comply with legal obligations

Where you have given permission, we may also send:

  • Newsletters
  • Special offers
  • Product launches
  • Promotions

You can unsubscribe at any time.


Legal Basis for Processing

Under UK GDPR we rely on one or more of the following legal bases:

  • Performance of a contract
  • Legal obligation
  • Legitimate interests
  • Consent

Marketing Communications

If you subscribe to our mailing list, we may send promotional emails about:

  • New products
  • Seasonal collections
  • Offers
  • Events
  • News

You can withdraw your consent at any time by:

  • Clicking the unsubscribe link
  • Contacting us directly

Cookies

Our website uses cookies to improve your browsing experience.

Cookies may be used to:

  • Keep you logged into your account
  • Remember your shopping basket
  • Remember preferences
  • Analyse website traffic
  • Improve website performance
  • Measure marketing effectiveness

You can manage your cookie preferences through your browser settings or our cookie banner.


Who We Share Your Information With

We only share your information where necessary.

This may include:

  • Payment providers
  • Delivery companies
  • Website hosting providers
  • IT support providers
  • Email marketing providers
  • Accounting software
  • Professional advisers where legally required

We never sell your personal information.


Data Security

We use appropriate technical and organisational measures to protect your information including:

  • SSL encryption
  • Secure hosting
  • Password protection
  • Limited staff access
  • Regular software updates
  • Firewall protection

No online system can be guaranteed to be completely secure, but we take reasonable steps to protect your information.


Data Retention

We keep your personal information only for as long as necessary.

This includes:

  • Customer accounts until deleted or inactive for an appropriate period
  • Order information for accounting and tax purposes (normally six years)
  • Marketing preferences until consent is withdrawn
  • Subscription information for as long as the subscription remains active and for any required legal retention period afterwards

Your Rights

Under UK GDPR you have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your information
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Further information is available at www.ico.org.uk.


Account Deletion

If you have created an account, you may request that it be deleted by contacting us.

Please note that we may still retain information where required for legal, accounting or tax purposes.


Subscription Management

Customers with active subscriptions can usually:

  • View subscription details
  • Update delivery information
  • Update payment methods (where supported by the payment provider)
  • Pause or cancel subscriptions (subject to any applicable terms and conditions)

Any outstanding orders already processed before cancellation may still be fulfilled.


Children’s Privacy

Our website is intended for adults purchasing bakery products.

We do not knowingly collect personal information from children under the age of 13.

If you believe a child has provided us with personal information, please contact us.


Third Party Links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of those websites.

Please review their privacy policies separately.


Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website and the date at the top of this page will show when it was last updated.


Contact Us

If you have any questions regarding this Privacy Policy or your personal information, please contact:

Cakefully Heaven

Email: carina@cakefullyheaven.co.uk

Address: 18 Bovinger Way, Southend-on-Sea, Essex, SS1 3SZ

Website: www.cakefullyheaven.co.uk


Complaints

If you are unhappy with how we have handled your personal information, please contact us first so that we can try to resolve your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO):

www.ico.org.uk

Telephone: 0303 123 1113