INTRODUCTION
This website is operated by ‘The Cakery Exeter Ltd’ (“we”, “us”, “our” or “The Cakery Exeter Ltd”). We are a controller for the purposes of the Data Protection Act 1998 and the EU GDPR (General Data Protection Regulation) 2016/679. This means that we are responsible for and control the processing of the personal information you provide to us when either using our website and/or our store at 105 Cowick Street, Exeter, EX4 1JE in accordance with this privacy policy.
The Cakery Exeter Ltd understand that customers care about the use and storage of their personal information and we value your trust in allowing us to do this in a careful and sensible manner. We have created this privacy policy statement in order to demonstrate our commitment to the privacy of our customers.
By using ‘The Cakery Exeter Ltd’, our website, our social media pages, via telephone, via email and any other ‘The Cakery Exeter Ltd’ services, you are acknowledging that we are processing your personal information and, where necessary consenting to such practices, as outlined in this statement. We do NOT use email marketing at this time, but we reserve the right to in future.

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
When you engage our services, as part of the buying and selling process, we collect the personal information you give us (as outlined in SECTION 2) in order to carry out our obligation/s to you in accordance with the services we provide.
We take care only to collect the information we require to carry out our obligation to you, and to fulfil our obligation and services to you. We will never collect sensitive information about you without your explicit consent.

You have the right to request:
a) Access to the personal data we hold about you.
b) The correction of your personal data when incorrect or incomplete.
c) Removal of any personal data you feel is not relevant to trading with us (see section 3).

You can request what information we hold about you either through our web site and using the contact us form on our “Contact Us” page or emailing us at info@thecakeryexeter.co.uk

SECTION 2 – PERSONAL INFORMATION WHICH WE COLLECT MAY INCLUDE
We collect personal information about you (and others if their personal information is required and provided by you) when you:
(a) place an order either personally, via a third party or as a relative or friend;
(b) speak to one of our customer services, representatives, or PR team;
(c) alter details during any required correspondence in the course of us carrying out your order;
(d) request a brochure or leaflet;
(e) sign up for our newsletter and other marketing emails that we may use in the future;
(f) enquire about or apply for a corporate account or order; engage with us to receive helpdesk services (such as by contacting our customer services department, through the “Contact Us” form on our website or by calling our telephone number/s (which may be recorded);
(g) post material to our website and / or social media page;
(h) complete any customer feedback or surveys as part of using our services in the past;
(i) raise a complaint or dispute with us or are involved in a legally recordable incident at our premises (e.g. in relation to health and safety reporting);
(j) participate in competitions or promotions;
(k) and/or use our website and in any other way.

The personal information collected in the above manner may include the following about you (and others if their personal information is required and provided by you):
(a) full name/s;
(b) postal address/es;
(c) email address/es;
(d) telephone number/s;
(e) payment details;
(f) geo-location/s;
(g) machine identifier/s (such as IP addresses);
(h) dispute resolution information;
(i) allergy information;
(j) supplementary information (dietary and other preferences and special requirements);
(k) image data;
(l) behavioural data (tags and cookies – see Cookies and Tracking section below);
(m) answer phone voice recordings;

SECTION 3 – CONSENT
How do you gain your consent?
When you engage our services and provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at info@thecakeryexeter.co.uk or mailing us at: The Cakery Exeter,105 Cowick Street, Exeter, Devon, EX4 1JE, UK.

SECTION 4 – DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

SECTION 5 – HOSTING
Our website is hosted with FDS Graphics They provide us with the online platform that allows us to sell our products and services to you.

SECTION 6 – THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Links
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECTION 7 – SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption.  Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

SECTION 8 – COOKIES
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or let you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

SECTION 9 – AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your county, country, state or province of residence, or that you are the age of majority in your county, country, state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

SECTION 10 – CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Office at info@thecakeryexeter.co.uk or by mail at The Cakery Exeter, 105 Cowick Street, Exeter, Devon, EX4 1JE, UK.