Privacy Policy

Velmora Bakes (“we”) is the controller of the personal data described here. This policy explains what we collect, why, and your rights under UK GDPR.

What we collect

• Account details: name, email address and phone number, via Google or email sign-in (Firebase Authentication).
• Order details: items, delivery address, delivery date and slot, cake message and notes.
• Saved addresses, if you choose to save them to your account.
• Technical data such as IP address and browser type, processed by our hosting provider for security and reliability.

Why we use it

• To bake, deliver and support your order (contract).
• To keep accurate business and tax records (legal obligation).
• To prevent fraud and keep the site secure (legitimate interests).

Who we share it with

We use Google Firebase (authentication, database, hosting and storage) to run the site. Delivery details are used by our own drivers. We do not sell your data.

How long we keep it

Order records are kept for six years for accounting purposes. Account data is kept until you ask us to delete it.

Your rights

You can ask to access, correct, delete or export your data, or object to its use, by emailing hello@velmorabakes.co.uk. You may also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use only essential storage (for example, to keep your basket and keep you signed in). We do not use advertising cookies.

Contact

Velmora Bakes, 1 Bakery Lane, London E1 6AN. Email hello@velmorabakes.co.uk.