Privacy Policy

Last updated: August 2026

Katy's Cakery respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit or make a purchase from our website, contact us, sign up to receive marketing communications or otherwise interact with Katy's Cakery.

For the purposes of UK data protection law, Katy's Cakery is generally the data controller responsible for the personal information described in this policy.

Who we are

Katy's Cakery
31 Hassall Road
Sandbach
Cheshire
CW11 4HQ
United Kingdom

Email: hello@katyscakery.com

Our online store is hosted by Shopify.

Information we collect

When you visit our website, place an order, contact us or otherwise interact with Katy's Cakery, we may collect personal information including:

your name;
billing and delivery address;
email address;
telephone number;
order and transaction information;
payment-related information;
information you provide when contacting us;
marketing preferences;
IP address;
browser and device information;
information about how you use and interact with our website; and
information collected through cookies and similar technologies.

We only collect personal information where we have a reason to do so.

How we use your information

We may use your personal information to:

Process and fulfil your orders
This includes taking payment, preparing your order, arranging delivery, sending order confirmations and communicating with you about your purchase.

Our lawful basis for this processing is generally that it is necessary to perform our contract with you.

Provide customer service
We use your information to answer questions, resolve problems and respond to enquiries about orders or our products.

Depending on the circumstances, our lawful basis may be performance of our contract with you or our legitimate interests in providing effective customer service.

Prevent fraud and protect our business
We may process information to detect suspicious transactions, protect our website and prevent fraudulent or unlawful activity.

Our lawful basis is our legitimate interest in protecting Katy's Cakery, our customers and our services.

Meet our legal obligations
We may retain or process certain information where required for accounting, tax, food safety, regulatory or other legal purposes.

Our lawful basis is compliance with our legal obligations.

Improve our website and services
We may analyse how customers interact with our website to understand how it performs and improve our products, services and customer experience.

Where required, we rely on your consent for analytics cookies and similar technologies. In other circumstances, we may rely on our legitimate interests where permitted by law.

Send marketing communications
Where you have signed up to receive marketing from us, we may send you information about new bakes, postal drops, offers and other Katy's Cakery news.

Where required by law, we rely on your consent to send these communications.

You can unsubscribe at any time by clicking the unsubscribe link contained within our marketing emails or by contacting us at hello@katyscakery.com.

Shopify

Our website and online store are hosted by Shopify.

Shopify provides the ecommerce platform that allows us to sell our products to you.

When you visit our store or make a purchase, Shopify may collect and process personal information on our behalf to provide services including hosting our store, processing transactions, providing security and fraud prevention and supporting the operation of our website.

Depending on the Shopify services and settings we use, Shopify may also process certain information for its own purposes.

You can find more information about how Shopify processes consumer information in the Shopify Consumer Privacy Policy.

Shopify's current guidance specifically requires merchants using Shopify Network Intelligence and Enhanced Servicesto tell customers that the store is hosted by Shopify and that Shopify may process customer data to provide more customised experiences, relevant advertising and insights into how customers interact with stores and advertisements.

Where these services are enabled on our store, information about your activity on our website may therefore be shared with Shopify and relevant third parties, which may be located in other countries, for these purposes.

Payments

Payments made through our website are processed using Shopify and/or the payment provider selected during checkout.

Katy's Cakery does not receive or store your complete payment card details where payment is processed directly by our payment providers.

Payment providers may process your information in accordance with their own privacy policies and legal obligations.

Delivery providers

Where you place an order requiring delivery, we may share information such as your:

name;
delivery address;
email address; and
telephone number

with our postal or courier providers where necessary to deliver your order and provide delivery notifications.

We only provide the information reasonably required to fulfil your delivery.

Other third parties

We may also share personal information with trusted service providers where necessary to operate Katy's Cakery.

These may include providers of:

website and ecommerce services;
payment processing;
delivery and fulfilment;
email and marketing services;
analytics;
accounting and bookkeeping;
fraud prevention; and
IT and website support.

These organisations may only receive the information necessary to provide the relevant service.

We may also disclose personal information where required by law, regulation, court order or another valid legal process, or where reasonably necessary to establish, exercise or defend legal claims.

We do not sell your personal information in the ordinary meaning of selling customer databases or contact details.

Certain privacy laws may, however, define some forms of advertising-related data sharing more broadly as a "sale" or "sharing". Where applicable, Shopify provides privacy controls relating to these activities.

Cookies and similar technologies

Our website uses cookies and similar technologies.

Some cookies are essential for our Shopify store to function, for example to operate checkout, remember your basket and provide website security.

Other cookies may be used for analytics, personalisation or advertising.

Where required by law, non-essential cookies will not be used until you have provided the necessary consent.

You can manage your preferences using the cookie banner or privacy controls available on our website.

Shopify notes that its cookie banner manages Shopify-specific cookies and pixels, while merchants may need additional measures where independently installed third-party cookies or pixels are used.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

The period will depend on the type of information and why we hold it.

For example, we may need to retain transaction and order information for longer periods to comply with tax, accounting and other legal obligations.

When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

International transfers

Shopify and some of the service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we and/or our service providers will use appropriate safeguards where required by applicable data protection law.

Shopify notes that UK GDPR does not require personal data to remain physically stored in the UK or Europe, but international transfers must receive appropriate legal protection.

Your rights

Under UK data protection law, depending on the circumstances, you may have rights including the right to:

request access to the personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal information;
request restriction of certain processing;
object to certain processing;
receive certain information in a portable format;
withdraw consent where we rely on your consent; and
object to direct marketing.

These rights are not absolute and may depend on the circumstances.

To exercise your rights, contact:

hello@katyscakery.com

We may need to verify your identity before completing certain requests.

If processing is based on your consent, withdrawing consent does not affect processing that took place before your consent was withdrawn.

You may also have privacy rights directly in relation to information processed by Shopify. Shopify provides its own privacy controls for access, deletion and advertising-related choices.

Complaints

If you have concerns about how Katy's Cakery handles your personal information, please contact us first at:

hello@katyscakery.com

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Children's privacy

Our website and online shop are not specifically directed towards children.

We do not knowingly collect personal information from children where doing so would require parental consent under applicable law.

If you believe a child has provided us with personal information inappropriately, please contact us.

Security

We take reasonable steps to protect the personal information we hold against loss, misuse, unauthorised access, disclosure or alteration.

Our online store is hosted by Shopify, which provides the ecommerce infrastructure used to operate our website and process customer transactions.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, legal requirements or how we process personal information.

The latest version will always be published on our website and the date at the top of this page will be updated where appropriate.