Privacy Notice
What is this Privacy Notice for?
This Privacy Notice sets out the key information that it is essential for you to know prior to providing personal data and information to Baking Whoopie.
We provide this Privacy Notice as the data controller for your personal data; we are responsible to you for how we process it. By using our website and services, we will collect and use your personal data in the ways outlined in this Privacy Notice.
We are committed to protecting your information and will use any personal data we collect from you in accordance with data protection legislation. If you do not agree with the ways we will use your personal data, please ensure you do not use our website form or services.
We may make changes to our Privacy Notice in future and will post these on our website with immediate effect.
What is personal data?
Personal data is any information about a living individual that can be used to identify the individual, such as: name, address, date of birth, email address, photographs or videos. It may also include special categories of personal data, which is information concerning: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data and data concerning a person's sexual orientation.
What personal data do we collect?
Baking Whoopie will only collect and use your personal data when necessary and where the law allows us to. The type of personal data we may collect includes:
Name
Email address
Phone number
Address
Personal dates which may be relevant to your order, e.g. birthday, wedding day, etc.
What do we use your personal data for?
Clients and Potential Clients – to manage your order
We will process Client data for our legitimate interests: to help us plan, organise and run the day-to-day operations of Baking Whoopie (e.g. producing quotations, organising deliveries or collecting payments) and to promote and market our business (e.g. marketing mailing lists). When you contact Baking Whoopie as a potential Client or when you complete the contact form on our website, we will collect personal data from you to enable us to carry out our business. This will include your full name, email address and contact number. We will also ask for details regarding your order and the associated event if relevant.
If you give us your consent to do so, we may also use your contact details to send you Baking Whoopie marketing/promotional communications. Any marketing communication we send you will include a clear option to withdraw your consent (e.g. to 'opt out' of future emails) and you can also withdraw consent at any point by contacting us.
Mailing List Subscribers – for marketing and promotion
We may ask if you consent to receive marketing and promotional information on our events and activities, such as emails about discounts and offers. If you agree to this we will store your name and email address and will use this data to send you marketing information. We will only send you information that is related to Baking Whoopie and we will never use your data to send you marketing messages from third parties.
Anything we send you will include a clear option to withdraw your consent which you can do at any time.
Website Visitors – for running and improving our website
We may use cookie technology when a person visits our website to collect and analyse anonymised data on how many people have visited, what pages they have looked at and other statistical information. Users can at any time disable cookies in their browser if they do not wish their (anonymised) data to be tracked.
Children
Our Service does not address anyone under the age of 18 ("Children").
We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we will take steps to remove that information immediately.
Sharing data with third parties
We may pass your personal data to directly related third parties, for example, we may share it with Mail Chimp to manage our Client database or PayPal to take payments. The third parties we share your personal data with are required by law to take appropriate security measures to protect your personal data.
We do not give permission to third parties to use and process your personal data for their own purposes. All of the suppliers we use have a full Privacy Policy of their own available on their website and we would advise all users to read these in full before submitting details.
Baking Whoopie have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Updating your personal data
You can contact us at any time to update or correct the personal data we hold on you.
How long will we hold your personal data?
We will not keep your personal data for longer than is necessary for the purposes set out in this Privacy Notice or as required by law. You may request to have your data removed at any time by contacting us.
How we protect your personal data
The security of your personal data is very important to us. We will ensure that we have in place appropriate organisational and technical measures to prevent unauthorised access, improper use, alteration, destruction or accidental loss of your personal data. For example, our centrally held records are stored using services such as Mail Chimp and are password protected. Information stored locally is also encrypted and password protected.
What rights do you have?
Under the GDPR, you have the following rights over your personal data and its use:
The right to be informed about what personal data we are collecting and how we will use it
The right of access to see the personal data we hold on you
The right to rectification, to ask that we update or correct your personal data
The right to object and request that we stop using your personal data for a particular purpose
The right to erasure, to ask us to delete the personal data we hold on you
The right to restrict processing, to ask that we temporarily stop using your personal data while the reason for its use or its accuracy are investigated
Though unlikely to apply to the personal data we hold and process on you, you also have rights related to portability and automated decision making