Privacy Policy

Last updated: 11/04/26

At The Bake Shed (“we”, “us”, “our”), we are committed to protecting your privacy and handling your personal data in a transparent and secure way.

This privacy policy explains how we collect, use and protect personal information when you visit www.thebakesheds.co.uk, contact us, or use our website. Under UK data protection law, a privacy notice should explain who is collecting personal data, why it is collected, how it is used, how long it is kept, who it is shared with, and what rights individuals have.

1. Who we are

The Bake Shed
26 Harland Road
Elloughton
HU15 1JT

Email: thebakesheds@gmail.com

For the purposes of data protection law, we are the data controller of the personal data described in this policy. The ICO explains that privacy information should identify the organisation responsible for the processing.

2. What personal data we may collect

We may collect and process the following personal data:

your name
your email address
your phone number, if you choose to provide it
any information you include in a message sent through our contact form or by email
technical information about how you use our website, such as your IP address, browser type, device information, and pages visited
cookie data and similar website usage information

3. How we collect your data

We collect personal data when:

you fill in a contact form on our website
you email us directly
you interact with our website
cookies or similar technologies collect information about your visit

Our website is hosted by Wix, and contact form submissions may be processed through Wix and sent to our email inbox at thebakesheds@gmail.com so that we can respond to your enquiry. Wix says site owners should maintain a privacy policy, and Wix sites may use cookies and related technologies.

4. How we use your personal data

We use personal data to:

respond to enquiries and messages
provide customer support
operate, maintain and improve our website
monitor website performance and security
keep our website secure
comply with legal obligations

5. Email marketing

We do not currently send marketing emails or newsletters.

If this changes in future, we will update this privacy policy and, where required, ask for your consent before sending marketing communications. The ICO says marketing emails to individuals usually require consent, subject to limited exceptions such as the “soft opt-in” in certain circumstances.

6. Our lawful bases for using your data

Under UK data protection law, we must have a lawful basis for processing personal data. Depending on the circumstances, we rely on:

legitimate interests — to respond to enquiries, run our website, improve our services, and keep the site secure
consent — where you choose to accept non-essential cookies, or where consent is otherwise required
legal obligation — where we need to keep or disclose information to comply with the law

The ICO says privacy notices should explain the lawful basis for processing and people’s rights, including the right to withdraw consent where consent is used.

7. Cookies

Our website may use cookies and similar technologies to help the site function properly and to support security and performance.

Some cookies may be essential for the website to work. If we use non-essential cookies, such as analytics or marketing cookies, these should only be used where appropriate consent has been given. The ICO explains that cookie rules are covered by PECR, and Wix says site owners can use its Privacy Center to add a cookie banner that allows visitors to accept or decline non-essential cookies.

You can also manage cookies through your browser settings.

8. Who we share your data with

We may share your personal data with trusted third parties where necessary to operate the website and respond to enquiries, such as:

Wix, which hosts and supports our website
Google/Gmail, where contact form submissions or direct emails may be received and stored
website service providers or technical support providers, where needed
legal, regulatory or law enforcement authorities where required by law

We do not sell your personal data.

9. International transfers

Some of our service providers may store or process personal data outside the UK. Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place.

10. How long we keep your data

We keep personal data only for as long as necessary for the purposes for which it was collected, including responding to enquiries, meeting legal obligations, resolving disputes, and protecting our legal rights.

As a guide:

contact form enquiries and emails may be kept for up to 12 months
technical website data may be retained in line with our website platform or service provider settings
we may keep information for longer where required by law or where there is a legitimate reason to do so

The ICO says privacy information should explain either the retention period or the criteria used to decide how long information is kept.

11. Your rights

Under UK data protection law, you may have the right to:

request access to your personal data
request correction of inaccurate data
request deletion of your data
request restriction of processing
object to processing in some circumstances
request transfer of your data
withdraw consent where processing is based on consent
complain to the Information Commissioner’s Office (ICO)

The ICO says individuals must be told about these rights as part of privacy information.

To exercise any of these rights, please contact us at: thebakesheds@gmail.com

You also have the right to complain to the ICO if you believe your data has been handled unlawfully.

12. Third-party links and embedded content

Our website may include links to third-party websites or embedded content, such as social media feeds. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies.

13. Data security

We take reasonable steps to protect personal data from unauthorised access, loss, misuse or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure.

14. Changes to this privacy policy

We may update this privacy policy from time to time. Any changes will be posted on this page, and the updated version will take effect from the date shown at the top.

15. Contact us

If you have any questions about this privacy policy or how we use your personal data, please contact us at: