Privacy Policy

This Privacy Policy explains how SugaSpice Bakery & Kitchen ("SugaSpice", "we", "us") collects and uses your personal information when you use our website (sugaspice.uk), contact us, enquire about wholesale supply, or sign up to our newsletter. We are committed to protecting your privacy and handling your data in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

SugaSpice Bakery & Kitchen is a bakery, kitchen and coffee house based at 10 Moore's Walk, St Neots, Cambridgeshire, PE19 1AG.

We are the "data controller" responsible for your personal information. Our legal/registered details are: [ SugaSpice full legal/registered business name ], [ business structure — Ltd company or sole trader ], [ company registration number (if a limited company) ], [ registered office address ].

If you have any questions about this policy or your data, contact us at sugaspicebakery01@gmail.com or by post at the address above.

What information we collect

We only collect information you choose to give us through the website. Depending on how you use the site, this may include:

Contact form

• Your name
• Your email address
• Your telephone number (optional)
• The subject and content of your message

Wholesale enquiry form

• Your business name and your contact name
• Your email address and telephone number (telephone optional)
• Business type, location, products you're interested in, expected volumes and any message

Newsletter signup

• Your email address
• The date/time you subscribed and which form you used
• A record that you consented to marketing emails

Website usage data (only with your consent)

If you accept analytics and/or marketing cookies, we collect limited information about how you use the site (such as pages viewed and approximate location derived from your IP address) and, for advertising measurement, interactions tracked by the Meta (Facebook) Pixel. See our Cookie Policy for the detail. We do not use session recording.

How we use your information and our legal basis

Submitting a contact or wholesale enquiry does not sign you up to marketing. We keep business enquiries and marketing consent separate.

Who we share it with

We do not sell your personal information. We share it only with service providers that help us run the website and business, including:

• Our website & hosting provider — stores website data and form submissions.
• PostHog — website analytics (only if you accept analytics cookies).
• Meta Platforms (Facebook/Instagram) — advertising measurement via the Meta Pixel (only if you accept marketing cookies).
• Google & Fontshare — serve the website's fonts; your IP address is processed to deliver them.
• Flipdish — our online ordering partner. If you order online you leave our website and Flipdish's own privacy policy applies.
• [ Any email marketing provider you use to send the newsletter, if applicable ]

Some of these providers may process data outside the UK; where they do, appropriate safeguards (such as UK/EU approved transfer mechanisms) are relied upon.

How long we keep it

• Contact enquiries: [ retention period — suggested up to 24 months ]
• Wholesale enquiries / customer records: [ retention period — suggested up to 6 years for business/accounting records ]
• Newsletter subscribers: until you unsubscribe, then removed within [ e.g. 30 days ]
• Analytics data: as set by our analytics provider's retention settings

Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information where appropriate
• Object to, or ask us to restrict, our processing
• Withdraw consent at any time (e.g. unsubscribe from marketing)
• Ask for a copy of your data in a portable format, where applicable

To exercise any of these rights, email us at sugaspicebakery01@gmail.com. You can also change your cookie choices at any time via Cookie Settings.

Marketing opt-out

Every marketing email we send includes an unsubscribe link, and you can email us to opt out at any time. We'll stop sending marketing as soon as you ask.

Complaints

We'd always prefer to resolve any concern directly, so please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or by calling 0303 123 1113.

Our ICO registration (Data Protection fee) number: [ ICO registration number, if registered ].

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the date it was last updated.