Privacy Notice

1. Who we are

Solade Bakes is a food business based in Croydon, UK, and is the “controller” of the personal information described here, meaning we decide how it is used. You can contact us at soladebakes1@gmail.com or on 07940 108322.

We do not sell your personal information, and we do not use it for advertising, profiling or automated decision-making.

2. What we collect, why and for how long

We only collect what we need to take and deliver your order and to answer your questions.

What we collect, why, our legal basis and how long we keep it
Information	Why we use it	Legal basis	Kept for
Order detailsYour name or organisation, email, phone, address, and the optional event date and notes you enter.	To take and fulfil your order, contact you about it, and issue your invoice.	Contract	6 years
What you orderedThe items, quantities, prices, totals, order and invoice numbers.	To fulfil the order and keep proper business and tax records.	Contract; legal obligation	6 years
Payment confirmationCard brand and last four digits, amount, date and Stripe's payment reference. We never receive or store your full card number, expiry date or security code.	To confirm you have paid and to produce your receipt.	Contract; legal obligation	6 years
Contact form messagesYour name, email, optional phone number and your message.	To reply to your enquiry.	Legitimate interests (answering questions)	Up to 12 months after we last reply, unless it relates to an order
Unfinished checkoutsThe details you entered if you started to pay but did not complete payment.	So you can come back and retry without re-entering everything, and to avoid duplicate orders.	Contract (steps before an order); legitimate interests	Up to 12 months
Technical dataYour IP address is checked in memory to limit repeated requests and is not saved to our database. Our hosting provider keeps standard short-lived request logs.	To keep the site secure and prevent abuse.	Legitimate interests (security)	Only as long as the hosting provider's logs are retained

We keep order, invoice and payment records for 6 years because UK businesses are expected to keep financial records for that long. When the retention period ends we delete or anonymise the information.

3. How card payments work

When you press “Continue to Secure Payment” you are taken to a payment page run by Stripe. You enter your card details on Stripe's page, not ours. We never see, receive or store your full card number, expiry date or security code. Stripe tells us whether the payment succeeded, along with the card brand and last four digits that appear on your receipt.

We use a small number of providers to run the service. They only process your information on our behalf:

Stripe takes card payments and handles card data.
Neon hosts our order database. It is located in London, UK.
Vercel hosts the website and runs its server code (in London, UK).
Resend sends order confirmation and notification emails.
Our business email account receives order notifications and contact form messages.

Some of these providers are international companies and may process information outside the UK. Where they do, they rely on the safeguards required by UK data protection law. We may also share information if we are legally required to, for example with HMRC or the police.

5. Cookies and browser storage

We do not use advertising or analytics cookies. To make ordering work, your browser stores your basket (in local storage) and the checkout details you have typed so far (in session storage). This stays on your device, your basket is cleared once an order is paid, and checkout details are cleared when you close the tab. Stripe's payment page may set its own cookies, which are covered by Stripe's own policies.

6. Your rights

Under UK data protection law you can ask us to:

give you a copy of the personal information we hold about you;
correct anything that is wrong or incomplete;
delete your information, where we have no legal reason to keep it (we must keep invoices for tax purposes);
restrict or object to how we use it; and
give you your information in a portable format.

To use any of these rights, email soladebakes1@gmail.com. If you are unhappy with how we handle your information you can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

7. Changes and contact