Privacy Policy | Big Mouth Bakes

1. Who We Are

Big Mouth Bakes is a small artisan bakery based in Tonbridge, South East UK, operated by Courtney Smith. For any questions about this privacy policy or your personal data, please contact us at info@bigmouthbakes.co.uk.

2. What Data We Collect

We may collect the following personal data when you interact with our website:

Contact form submissions: name, email address, phone number (optional), subject, and your message.
Custom order enquiries: name, email address, phone number, event details, dietary requirements, delivery preferences, and your message.
Website usage data: anonymised analytics data such as pages visited, browser type, and device information (collected via cookies where consent is given).

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiries and messages.
To process and fulfil custom order requests.
To communicate with you about your orders, including updates and delivery arrangements.
To improve our website and services.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:

Consent: when you submit a form or enquiry on our website.
Legitimate interest: to respond to your enquiries and improve our services.
Contractual necessity: to fulfil custom orders you have requested.

5. Third-Party Services

We use the following third-party services to operate our website:

Formspark: to process form submissions securely. Formspark stores your form data on their servers. See their privacy policy at formspark.io.
Vercel: to host our website. Vercel may collect anonymised usage data.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions and order enquiries are retained for up to 12 months, after which they are securely deleted.

7. Your Rights

Under the UK GDPR, you have the following rights:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate data.
Right to erasure: request deletion of your personal data.
Right to restrict processing: request we limit how we use your data.
Right to data portability: request your data in a portable format.
Right to object: object to our processing of your data.

To exercise any of these rights, please email us at info@bigmouthbakes.co.uk. We will respond within 30 days.

8. Cookies

Our website may use essential cookies to ensure the site functions correctly. We do not use tracking or advertising cookies without your explicit consent. You can manage your cookie preferences through your browser settings.

9. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact & Complaints

If you have any questions or concerns about this privacy policy, please contact us at info@bigmouthbakes.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.