Privacy Policy

1. What we collect

• Account details: your name, email address and password credentials, plus the side of the app you use (customer or bakery) and, for administrators, your role.
• Customer profile: your name, email, phone number, home address and date of birth, which we ask for once before you can order.
• Bakery details: business name, contact name, email, phone, address, postcode, city, social handle, menu items, collection locations, accepted payment methods and price ranges.
• Order details: the design brief, occasion, needed-by date, budget, handover choice, quote and status history, and any reference picture you upload.
• Content: reviews, ratings, app feedback and messages you send us.
• Technical and usage data: basic analytics about which screens are used, and log data needed to keep the app secure and working.

2. Why we use it

• To run your account and show you bakeries, or your bakery to customers.
• To pass the details a bakery needs to quote for and make your order.
• To help when there is a problem with an order, and to keep the marketplace safe.
• To check eligibility, prevent misuse and fraud, and keep records of disputes.
• To understand which parts of the app are used so we can improve it.

3. The lawful bases we rely on

Under UK data protection law we rely on: performance of a contract (running your account and your orders), legitimate interests (keeping the marketplace safe, improving the app, preventing fraud), consent (any marketing or non-essential analytics you agree to), and legal obligation (records we must keep).

4. Who sees your data

• The bakery you order from sees what it needs to make and hand over your order: your name, contact details, the design brief and your handover arrangement.
• Other customers see only what you publish publicly, such as reviews and bakery menu listings.
• Our service providers process data for us under contract: hosting and database, private file storage, email delivery and platform analytics.
• Professional advisers and authorities, where we are legally required or where it is needed to protect people.
• We do not sell your personal data, and we do not share it for third-party advertising.

5. Reference pictures and design previews

A reference picture you upload is (stored privately). It is shown only to the bakery handling that order, through a temporary link that expires, and to you.

Some design previews are AI-generated illustrations created from your brief. Where that is the case, we say so on the order.

6. How long we keep it

We keep account and profile data while your account is open, and delete or anonymise it when you close your account. Order records, quotes and commission records are kept for longer, because we need them for accounting, tax and dispute handling.

Reports and analytics are kept in aggregated form that does not identify you.

7. Your rights

You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop certain processing, object to processing based on legitimate interests, ask for portability, and withdraw consent at any time where consent is the basis.

Contact us to make a request. If you are unhappy with our response you can complain to the Information Commissioner's Office.

8. Cookies and analytics

We use a small set of strictly necessary cookies and local storage to keep you signed in, and platform analytics to understand which screens are used. The Cookie and analytics policy sets this out in detail.

9. Security and children

Access is controlled by role, uploads go to private storage, and we limit who inside CakeConnect can see data. No system is perfect, so use a strong password and tell us about anything suspicious.

CakeConnect is not for children. We ask for a date of birth so we can check eligibility, and we do not knowingly collect data from children under 13.

10. Changes and contact

We may update this policy as the app changes; the version published here applies. For any privacy question or request, contact us through the contact page.