privacy policy
At City Bakes, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you place an order, contact us, or interact with us online.
1. What Information We Collect
We may collect the following personal data from you:
Name
Contact details (email address, phone number)
Address (for delivery or invoicing purposes)
Order details (what you’ve purchased, dates, special notes)
Payment information (only via secure third-party services like PayPal or bank transfer; we do not store payment card information)
We collect this data when you:
Place an order via DM, email, form, or website
Contact us with an enquiry
Sign up for updates (with your consent)
2. How We Use Your Data
We only use your data to:
Process and fulfil your order
Communicate with you about your order or delivery
Send updates or marketing emails (only if you opt in)
Respond to enquiries or feedback
3. How We Protect Your Data
Your data is stored securely and only accessible to the bakery owner.
We do not share your information with third parties, except where legally required or necessary to fulfil your order (e.g., courier services).
All payment transactions are handled securely via trusted platforms (e.g., PayPal, Stripe, bank transfer) and are subject to their own privacy policies.
4. Marketing & Communications
We will only send you marketing messages (e.g. new products, pre-orders, seasonal boxes) if you have given us explicit consent.
You can unsubscribe at any time by replying “STOP” or clicking an unsubscribe link where available.
5. Cookies
Our website may use cookies to improve your browsing experience. These are small files stored on your device to help the site function properly or collect anonymous usage data. You can disable cookies in your browser settings at any time.
6. Data Retention
We retain customer data only as long as necessary to:
Comply with legal/tax obligations
Maintain order records
Provide great customer service
We review and securely delete data that is no longer needed.
7. Your Rights
Under UK data protection laws, you have the right to:
Access the personal data we hold about you
Correct or update any incorrect data
Request deletion of your data
Withdraw consent for marketing at any time
To make any of these requests, contact us using our contact form.

