Privacy & Data Protection Policy

Last updated: 31 January 2026

This Privacy & Data Protection Policy explains how I collect, use, and protect your personal data when you visit or make a purchase from Baked by me for you (“the website”).

I am committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I Am

Business name: Baked by me for you
Business type: Sole trader
Email address: bakedbymeforyou@hotmail.com

Location: Horsforth, Leeds, United Kingdom

If you have any questions about this policy or how your data is used, you can contact me using the details above.

2. What Personal Data I Collect

I may collect the following personal data:

  • Contact details: name, email address, telephone number

  • Order details: billing address, delivery address, order contents, and order notes

  • Payment information: payments are processed securely by Squarespace Payments

    I do not store or have access to your full card details

  • Marketing preferences: whether you choose to opt in to news or updates

  • Technical data: IP address, browser type, device information, and website usage data (via cookies)

I do not knowingly collect sensitive personal data.

3. How I Collect Your Data

Your personal data is collected when you:

  • Place an order through my website

  • Choose collection or delivery at checkout

  • Opt in to receive news or updates

  • Submit a message through the contact form

  • Browse the website (via cookies and analytics)

4. How I Use Your Personal Data

Your data is used to:

  • Process and fulfil your order

  • Arrange collection or postal delivery

  • Communicate with you about your order

  • Provide delivery updates and tracking

  • Send occasional news or updates (only if you opt in)

  • Send reminder emails if you add items to your basket but do not complete checkout (abandoned basket emails)

  • Improve my website and services

  • Comply with legal and accounting obligations

I will only use your personal data where I have a lawful basis to do so.

5. Lawful Bases for Processing

Under UK GDPR, I rely on the following lawful bases:

  • Contract - to process and deliver your order

  • Consent - when you opt in to receive news or updates

  • Legal obligation - for tax and accounting records

  • Legitimate interests - to operate my business effectively, including sending reminder emails about items left in your online basket where you have provided your email address during checkout

You can withdraw consent for marketing at any time.

6. Marketing & Updates

At checkout, you may choose to opt in to receive occasional news or updates from Baked by me for you.

  • Marketing emails are optional

  • You can unsubscribe at any time by clicking the link in the email or contacting me directly

  • I will never sell your email address

  • Abandoned basket emails

    If you begin the checkout process and provide your email address but do not complete your purchase, I may send you a reminder about your unfinished order. These emails are sent to help you complete your purchase and are not promotional marketing emails. You can opt out of receiving abandoned basket emails at any time by using the link in the email.

7.   Reviews & Feedback

  • After you place an order, you may receive a one-off email inviting you to leave a review or provide feedback about your purchase

  • This email is sent for the purpose of improving my products and services and is not used for marketing

  • You can choose not to receive review request emails at any time by using the opt-out option included in the email or by contacting me directly

8. Sharing Your Data

I only share your data where necessary to run my business. This includes:

  • Squarespace - website hosting, checkout, forms, and payments

  • Squarespace Payments - payment processing

  • Delivery providers - including Royal Mail and Evri, who receive your name, address, email address, and telephone number for delivery and tracking purposes

  • Professional services - such as accountants, if required

All third parties are required to handle your data securely and lawfully.

9. International Data Transfers

Although I only sell within the UK, my website can be viewed globally.

Squarespace and some service providers may process data outside the UK. Where this happens, appropriate safeguards are in place to ensure your data is protected in line with UK GDPR.

10. How Long I Keep Your Data

I only keep personal data for as long as necessary:

  • Order and transaction records: retained as required by UK tax law

  • Contact form enquiries: typically up to 12 months

  • Marketing data: until you unsubscribe or ask for deletion

Data is securely deleted when no longer required.

11. Your Data Protection Rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent for marketing at any time

To exercise any of these rights, please contact me.

12. Data Security

I take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access.

13. Changes to This Policy

This policy may be updated from time to time. Any changes will be posted on this page with an updated date.

14. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact me.


Business name: Baked by me for you

Pink background with a simple line drawing of a heart.