Data Protection Officer
Cake Stuff Ltd
Milton Industrial Estate
We may collect and process the following data about you:
· Information you give us: You may give us information about you by filling in forms on our site or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our site, subscribe to our services, search for a product, place an order on our site, participate in discussion boards or other social media functions on our site, enter a competition, promotion or survey and when you report a problem with our site. The information you give us may include, but is not limited to, your name, address, e-mail address and phone number, financial and credit card information, personal description and photograph.
· Information we collect about you. With regard to each of your visits to our site we may automatically collect the following information:
o Technical information, including the Internet Protocol (IP) address used to connect your computer or device to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
o Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from out site (including date and time); products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction (such as scrolling, clicks and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
· Information we receive from other sources. We may receive information about you if you use any of the other websites we operate, the other services we provide and/or any of our social media pages. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them. All third-party organisations that we work with are fully GDPR compliant.
We use information held about you in the following ways:
· Information you give to us. We will use this information:
o to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
o to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
o to pass on the appropriate personal information to any of the industry-leading payment providers that we use to process your payments. These include Sage Pay, Lloyds Cardnet and PayPal. These payment providers, in turn, also have to be, and are, GDPR compliant. Cake Stuff never store your credit or debit card information;
o to pass on the appropriate personal information to our delivery partners who require it to deliver your order. Such partners include DPD, APC, Royal Mail and other fulfilment and delivery partners we may use from time to time. These fulfillment and delivery partners, in turn, also have to be, and are, GDPR compliant;
o to notify you about changes to our service;
o to ensure that content from our site is presented in the most effective manner for you and for your device.
· Information we collect from you. We will use this information:
o to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
o to improve our site to ensure that content is presented in the most effective manner for you and for your device;
o to allow you to participate in interactive features of our services, when you choose to do so;
o as part of our efforts to keep our site safe and secure;
o to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
o to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.
· Information we receive from other sources. We may combine this information with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
We may share your personal information with any member of the Cake Stuff group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may share information with selected third parties including;
o In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
o If Cake Stuff or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our very best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try and prevent unauthorised access.
Personally identifiable information is defined as any personal information that could identify you such as your name, address, telephone number, billing and shipping information, credit card information or e-mail address. Generally, when you visit any Cake Stuff website, you are not required to disclose who you are or reveal any personally identifiable information. Since Cake Stuff takes your privacy seriously, no personally identifiable information will be collected unless it is voluntarily provided.
Cake Stuff will not sell or provide any personal details in its possession to third party marketing companies. Only directors and authorised employees of Cake Stuff have access to customer information. Information may only be disclosed to third parties if consent is received, if we are compelled or authorised to do so by Law, or if there is a reasonable belief that there is a threat to someone's life or health.
Cake Stuff is committed to maintaining the security of data collected and protecting it from loss, misuse or alteration. This applies to demographic information, client site usage information and personally identifiable information. Data collected is stored on secure Cake Stuff servers that can be accessed by The Company’s authorised personnel only. To safeguard all information collected, The Company and its employees follow the practices in this Policy. Access or use of information for any purpose other than those explained in this Policy will not be authorised.
You have the right to ask us not to process your personal data for marketing purposes. We will always inform you (before collecting your data) if we intend to use your data for such purposes. You can exercise your right to prevent such processing by not checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by going to the My Preferences section nested under My Account or by contacting us at firstname.lastname@example.org. You can also unsubscribe by clicking the unsubscribe button which is located at the bottom of every marketing email we send out.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Under The Data Protection Act 1998, you have the right to access information held about you. Your right of access can be exercised in accordance with the 1998 Act.
If you would like to view, change or de-activate any personally identifiable information you have submitted to Cake Stuff, please send a Subject Access Request to us and, as soon as your request is received, we will provide, change or de-activate any information that could be used to identify you unless disclosure is required or authorised by Law. Once de-activated, your data will no longer be accessible.
You may correct, update or erase your personal information at any time by emailing us at email@example.com or by changing your profile on our website. Please include your name, address, date of birth and email address when you contact us as this helps us to ensure that we accept amendments only from the correct person. We encourage you to promptly update your personal information if it changes.
We will securely retain your information for as long as is reasonably necessary and in accordance with applicable law. If you wish to submit a request that your data be deleted, please write to us at the above address. You have the right to receive a copy of the personal information that we hold about you. Please write to us at the address above if you wish to exercise this right.
If you have subscribed to receive marketing communications, you can unsubscribe here at any time.
Information Commissioner's Office
You can also contact the Information Commissioner’s Office using their online form: https://ico.org.uk/global/contact-us/email/