The Legal Framework We Rely On

We rely on several legal bases to process your personal data, including:

• Consent: We may collect and process your data if you have given us explicit consent, such as when subscribing to updates, newsletters, or promotions.
• Legitimate Interest: In some cases, we collect and process your data to pursue our legitimate business interests, like ensuring you receive relevant information based on your previous interactions.
• Contractual Obligation: We may need your personal data to fulfill a contract with you, such as processing your orders or deliveries.
• Legal Compliance: If required by law, we may need to process your data to meet legal obligations.

When Do We Collect Your Personal Data?

We collect your personal data when you:

• Visit our website and provide information about yourself.
• Place an order on our website or interact with us for customer service.
• Subscribe to our newsletter or any promotional material.
• Engage with us on social media platforms.
• Enter a competition or prize draw.
• Provide personal or employment details when applying for a job with us.

What Personal Data Do We Collect?

We collect the following types of personal data depending on how you interact with us:

• Personal Data: Your name, email address, phone number, and billing/shipping address.
• Transaction Data: Information related to your purchase of our cakes or services.
• Communication Data: Any correspondence between you and our customer service or marketing team.
• Technical Data: IP addresses, browser type, device information, and browsing activity on our website.

How Do We Use Your Personal Data?

We use your personal data for the following purposes:

• To process orders and fulfill your requests for our cakes and services.
• To send you promotional offers, discounts, or newsletters if you have consented to receive them.
• To personalize your experience on our website and improve our services based on your preferences.
• To communicate with you regarding your orders, feedback, or inquiries.
• To conduct research and marketing activities, such as customer satisfaction surveys.

How Do We Protect Your Personal Data?

We are committed to securing your personal data and take the following steps to protect it:

• Secure access to all transactional areas of our website using encrypted connections (HTTPS).
• Storing your data in secure systems with password protection and using SSL encryption for sensitive information (e.g., payment details).
• Regular monitoring of our systems to detect and prevent unauthorized access.

How Long Will We Keep Your Personal Data?

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

Once your personal data is no longer needed, it will be securely deleted or anonymized.

Who Do We Share Your Personal Data With?

We may share your personal data with third parties for the following purposes:

• Service Providers: We share your data with third-party providers (e.g., payment processors, delivery services) to fulfill your orders.
• Marketing Partners: We may share your data with trusted marketing partners for promotional purposes.
• Legal Requirements: If required by law, we may disclose your personal data to authorities or regulators.

Your Rights Over Your Personal Data

You have the right to:

• Access and request a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data when it is no longer necessary for us to retain it.
• Withdraw consent to receive marketing communications.
• Object to the processing of your personal data for certain purposes.

If you wish to exercise any of these rights, please contact us at contact@elliescakes.co.uk.