We take safeguarding your data very seriously. Please read this page carefully. It will explain how and why we collect your data, and help you to understand what we do with it.

From time to time, we may need to change our Privacy Policy because of changes in our organisation, changes to legislation or in our attempts to serve your needs better. Any updates to our Privacy Policy will be published on our website at landofbakebelieve.co.uk/privacy-policy.

Land of Bake Believe is responsible for collecting, processing, storing and safe-keeping personal and other information as part of providing a service and carrying out our regular business activities. We manage personal information in accordance with the Data Protection Act 2018.

Please email chloe@landofbakebelieve.co.uk with any questions regarding this Privacy Policy.

What information do we collect?

We collect data about you through a variety of methods: the contact form on our website, direct messaging on social media platforms, and emails. We will only collect the minimum data required to process your enquiry and order, which may include the following:

• your name

• your email address

• your phone number

• your delivery address

• your dietary requirements

• the contact information of any person who is to receive your delivery

We will never sell, rent or share your data with any third parties without your permission, unless required to by law or under court order. With your permission, we may need to share your information with trusted third parties, for example event managers, florists, or venue staff, in order to facilitate delivery of your order.

How will we use your information?

We may use the information collected to:

• process your enquiry and send you quotations by email.

• provide the service set out in the quotation document.

• send you our newsletters, where you have consented to be contacted for such purposes.

• inform you of any changes in our services.

Data is managed to ensure that it is either erased from our system when it is no longer required for the purpose for which it was collected, retained for legal reasons or minimised and retained.

What is our lawful basis for processing your data?

The General Data Protection Regulation (GDPR) provides that processing of your data shall only be lawful if and to the extent that at least one of the following applies:

• you have consented

• for the performance of a contract

• for compliance with a legal obligation which we must perform

• to protect vital interests of your or another person

• it is in the public interest

• it is in the legitimate interests pursued by us

We collect data for the purposes set out above. In all circumstances we will have obtained your data because you provided your consent. You have the right to withdraw your consent, however we may be required to retain some of your information to comply with our legal obligations.

What rights do I have with regards to my information?

As a data subject, you have a number of statutory rights. Subject to certain conditions, and in certain circumstances, you have the right to:

• request access to your personal information - this is usually known as making a data subject access request and it enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it

• request rectification of your personal information - this enables you to have any inaccurate or incomplete personal information we hold about you corrected

• request the erasure of your personal information - this enables you to ask us to delete or remove your personal information where there’s no compelling reason for its continued processing, e.g. it’s no longer necessary in relation to the purpose for which it was originally collected

• restrict the processing of your personal information - this enables you to ask us to suspend the processing of your personal information, e.g. if you contest its accuracy and so want us to verify its accuracy

• object to the processing of your personal information - this enables you to ask us to stop processing your personal information where we are relying on the legitimate interests of the business as our legal basis for processing and there is something relating to your particular situation which makes you decide to object to processing on this ground

• data portability - this gives you the right to request the transfer of your personal information to another party so that you can reuse it across different services for your own purposes.

If you wish to exercise any of these rights, please contact chloe@landofbakebelieve.co.uk. We may need to request specific information from you in order to verify your identity and check your right to access the personal information or to exercise any of your other rights. This is a security measure to ensure that your personal information is not disclosed to any person who has no right to receive it.