1. Who We Are 

We are THAT Cake Lady, a bakery specialising in freshly baked cakes, pastries, and desserts, offering both in‑store collection and delivery across Devon and the United Kingdom. We are committed to protecting your personal information and respecting your privacy. 

2. How to Contact Us 

If you have any questions about this policy or how we handle your data, you can contact us at: 

Email: Contact@itsthatcakelady.co.uk 

3. The Information We Collect 

We may collect: 

• Identity & Contact Details: Name, address, phone number, email. 
• Order Information: Items purchased, delivery instructions, payment details (processed securely via our payment provider). 
• Website Usage Data: IP address, browser type, pages visited, cookies. 
• Marketing Preferences: Your consent for receiving offers and updates. 

4. How We Use Your Information 

We use your data to: 

• Process and deliver your orders. 
• Communicate with you about your order or enquiries. 
• Send you marketing emails (only if you’ve opted in). 
• Improve our website and services. 
• Comply with legal obligations. 

5. Legal Basis for Processing 

We process your personal data under: 

Contract – to fulfil your order. 

Consent – for marketing communications. 

Legal obligation – for tax and accounting purposes. 

Legitimate interests – to improve our services. 

6. Sharing Your Information 

We only share your data with: 

1. Delivery partners (to get your cakes to you). 
2. Payment processors (to handle secure transactions). 
3. IT and website service providers. 
4. Legal or regulatory authorities if required. 

We never sell your personal data. 

7. Cookies 

Our website uses cookies to improve your browsing experience and analyse site traffic. You can manage or disable cookies in your browser settings.  

8. How Long We Keep Your Data 

We keep your personal data only as long as necessary for the purposes we collected it, including legal, accounting, or reporting requirements. 

9. Your Rights 

Under UK GDPR, you have the right to: 

• Access the personal data we hold about you. 
• Request correction or deletion of your data. 
• Withdraw consent for marketing at any time. 
• Object to certain processing. 
• Request data portability. 

To exercise your rights, contact us using the details above. 

10. Changes to This Policy 

We may update this policy from time to time. The latest version will always be posted on our website.