Privacy Policy

Who we are

Ebonie's Bakes is the data controller for personal data processed through this website, unless we state otherwise (for example if a payment processor acts on their own terms). You can contact us about privacy via our https://www.eboniesbakes.co.uk/contact form.

What data we collect

• Messages and enquiries — When you use our contact form we process the details you enter (name, email, phone number, and the description of your order or enquiry) to reply to you.
• Reviews — If you submit a public review we may process your name or initials as shown, your review text, and related technical data needed to run the service.
• Security — We may use security checks (such as Cloudflare Turnstile) to reduce automated abuse. This can involve limited technical data sent to our security providers as described in their documentation.
• Website usage (optional) — If you agree in our cookie banner, we use privacy-focused analytics (Plausible) to see aggregated traffic — not for advertising profiles. You can change or withdraw consent anytime via “Cookie settings” in the footer.
• Strictly necessary storage — We use limited storage (for example to remember your theme and your cookie choices). These are needed for the site to work securely and are not used for marketing.

Why we use your data (lawful bases)

We rely on:

• Performance of a contract or steps you ask for — To respond to enquiries and fulfil orders you request.
• Legitimate interests — To keep our site secure, improve it, and handle reviews fairly, where this does not override your rights.
• Consent — For optional analytics cookies / similar technologies, where required (see our cookie notice below).
• Legal obligation — Where we must comply with law, regulators or courts.

Cookies and similar technologies

We use a cookie banner to obtain consent where UK rules require it (for example for non-essential analytics). Necessary cookies and storage let the site function (including remembering your theme and security). For details of tools we may load after consent, see our cookie controls and the providers’ own privacy materials (Plausible, Cloudflare).

How long we keep information

We keep personal data only as long as needed for the purposes above — for example while we handle your enquiry, as required for accounting or disputes, or as described in review moderation workflows. When no longer needed, we delete or anonymise it where feasible.

Who we share data with

We may use trusted service providers (hosting, email delivery, security, analytics when you consent) who process data on our instructions and must protect it. If data leaves the UK/EEA we ensure appropriate safeguards where required.

Your rights

Under UK data protection law you may have rights including:

• Access to your personal data
• Correction of inaccurate data
• Erasure in certain cases
• Restriction or objection to processing in certain cases
• Data portability where applicable
• Complaint to the Information Commissioner’s Office (ICO)

To exercise rights, contact us using the details above.

Children

Our site is aimed at adults ordering or planning orders. If you believe a child has provided personal data, contact us and we will take appropriate steps.

Changes

We may update this policy from time to time; the “Last updated” date will change. Material changes may be highlighted on the site where appropriate.

This page is general information, not legal advice. Have a lawyer review if you need advice specific to your situation. Related: Terms of Use.