Privacy Policy

Who we are and how to contact us

Little Bear Bakes is responsible for the personal information collected through littlebearbakes.co.uk. You can contact us at hollyeg@icloud.com or by post at 55 Abbey Green, Spennymoor, County Durham, DL16 6PD.

Information we collect

When you place an order, we collect your name, email address, delivery or collection details, optional telephone number and gift message, selected products, payment references and order history.

When you send an enquiry, we collect the contact details and request information you provide. Cake enquiries may include optional inspiration photos. Please only upload images you have permission to share and avoid including unnecessary personal information about other people.

Our website and service providers may process technical information such as IP addresses, browser information and error logs to operate and protect the service. The website uses hashed identifiers for temporary submission and login limits.

How and why we use information

We use order information to take payment, prepare your bakes, arrange collection or delivery, send order updates and resolve problems. We use enquiry information and inspiration photos to respond to your request and discuss a possible booking.

We also use information to keep business records, prevent misuse, protect the website and investigate payment disputes. Our lawful bases are taking steps at your request before entering a contract, performing a contract, meeting legal obligations, and our legitimate interests in running and securing the business. Where consent is required, we will ask for it.

Allergies and dietary information

You may choose to tell us about an allergy or dietary requirement when making a cake or traybake enquiry. We use this information only to discuss whether a product is suitable and to handle your request. You do not need to include a diagnosis or medical history.

If you share information about your health, we ask for your explicit consent to use it for this purpose. You can withdraw that consent by contacting us, although this may affect our ability to assess or fulfil your request. If you are enquiring on someone else’s behalf, please obtain their permission before sharing their health information.

Payments

Payments are handled by Stripe on its secure checkout page. We do not collect or store your full card number or security code. We receive payment references and status information needed to confirm and administer your order. Stripe also processes information under its own privacy notice.

Who receives information

We share the information necessary to provide our services with Stripe for payments; Resend and our email service for enquiries and order messages; Royal Mail for postal delivery; and our website hosting and data-storage providers. Service providers may process information on our behalf or for their own purposes as explained in their privacy notices.

We may also share information with professional advisers, insurers or authorities where needed to meet legal obligations or resolve a dispute. We do not sell your personal information. The website currently has no newsletter sign-up or advertising trackers.

International processing

Some service providers may process information outside the UK. Where required, transfers must be covered by an applicable adequacy decision or approved contractual safeguards. You can contact us for details of the safeguards relevant to your information.

How long we keep information

We keep order and transaction records for as long as needed to fulfil orders, handle disputes and meet tax or accounting obligations. Enquiries and inspiration photos are kept for as long as needed to answer your request, manage any resulting booking and deal with follow-up questions.

We review records and remove information that is no longer needed, subject to legal obligations and any unresolved dispute. You can contact us to ask about the retention of your particular information. Service providers and backups may retain information under their own retention arrangements.

Cookies and browser storage

The website uses browser storage to remember your basket, favourites, recently viewed bakes and delivery preference. Temporary session storage saves checkout details and payment attempts so you can resume or recover checkout. An essential cookie keeps bakery administrators signed in.

You can clear saved information using your browser’s site-data controls. This may empty your basket or remove saved checkout details. Privacy controls, consent or opt-out choices will be provided where required for a particular storage purpose. The website does not currently use advertising or visitor-analytics cookies.

Keeping information safe

We use access controls and service-provider security measures to protect customer information. Access to order information is restricted to authorised people who need it to operate the bakery. Please do not send card details or other unnecessary sensitive information through enquiry forms or email.

Your rights

Depending on the circumstances, you can ask to access or correct your personal information, have it deleted, restrict its use, receive a portable copy, or object to processing based on legitimate interests. You can also withdraw consent where we rely on it. Some information may need to be retained to meet legal obligations or handle a dispute.

Contact hollyeg@icloud.com to make a request. We may need to verify your identity before responding. You can also complain to the Information Commissioner’s Office at ico.org.uk if you are unhappy with how we handle your information.

Changes to this notice

We may update this notice as the website or our services change. The date at the top shows when it was last updated.