Privacy Policy
Last updated: April 2026

At Emily Mae’s Bake and Box I am committed to protecting your personal data in line with the UK General Data Protection Regulation and the Data Protection Act 2018.

​

1. What Information I Collect

I may collect and process the following data:

• Name

• Email address

• Phone number

• Billing and delivery address

• Order details

• Payment information (processed securely via third parties—we do not store card details)

 

2. How I Use Your Information

I use your data to:

• Process and deliver your orders

• Communicate with you about your order

• Provide customer support

• Improve our website and services

• Send marketing emails (only if you opt in)

 

3. Legal Basis for Processing

I process your data under the following legal bases:

• Contract: to fulfil your order

• Legal obligation: for tax/accounting purposes

• Consent: for marketing communications

 

4. Sharing Your Data

I may share your data with:

• Payment processors (e.g. Stripe, PayPal)

• Delivery/courier services

• Website hosting providers

I only share what is necessary and ensure these parties handle your data securely.

​

5. Data Retention

We keep your personal data only as long as necessary:

• Order data: up to 6 years (for legal/tax purposes)

• Marketing data: until you withdraw consent​

​

6. Your Rights

Under UK law, you have the right to:

• Access your data

• Correct inaccurate data

• Request deletion

• Object to processing

• Withdraw consent at any time

To exercise your rights, contact me at emilymaesbakeandbox@gmail.com

​

7. Data Security

I take appropriate measures to protect your data, including secure servers and encryption where applicable.

​

8. Contact Me

If you have any questions about this policy, contact:
📧 emilymaesbakeandbox@gmail.com
 

You also have the right to complain to the Information Commissioner's Office.