Privacy Policy

Last Updated: June 2026

Fatal Bakehouse ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, place an order, contact us, or interact with our business.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

---

Who We Are

Fatal Bakehouse is the data controller responsible for your personal information.

For any privacy-related questions, requests, or concerns, please contact us via our website contact form or email address displayed on our website.

Fatal Bakehouse is registered with the UK's Information Commissioner's Office (ICO).

---

Information We Collect

We may collect and process the following information:

Information You Provide

When placing an order, making an enquiry, subscribing to communications, or contacting us, we may collect:

• Full name

• Billing address

• Delivery address

• Email address

• Telephone number

• Order details

• Payment information (processed securely through third-party payment providers)

• Dietary requirements or allergen information voluntarily provided by you

• Messages, correspondence, and enquiries

Website Information

When you visit our website, certain information may be collected automatically, including:

• IP address

• Browser type

• Device information

• Pages visited

• Website usage statistics

• Cookies and similar technologies

CCTV Footage

For the security of our premises, staff, customers, property and stock, rolling CCTV recording operates within and around our Cake Shed locations.

CCTV footage may capture:

• Images of visitors and customers

• Vehicle details

• Date and time of visits

Footage is recorded continuously and retained only for as long as reasonably necessary for security, crime prevention, insurance, health and safety, or legal purposes.

CCTV footage may be shared with law enforcement agencies, insurers, legal representatives, or regulatory bodies where legally required.

---

How We Use Your Information

We use your personal information to:

• Process and fulfil orders

• Deliver products and services

• Respond to enquiries

• Provide customer support

• Manage bookings and event orders

• Process payments

• Maintain business records

• Improve our website and services

• Prevent fraud and misuse

• Comply with legal obligations

• Protect our business, staff, customers and property

Where you have provided consent, we may also use your information to send marketing communications.

You can withdraw consent at any time.

---

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Processing is necessary to fulfil orders and provide products and services requested by you.

Legal Obligation

Processing is necessary to comply with legal and regulatory requirements.

Legitimate Interests

Processing is necessary for:

• Running our business

• Preventing fraud

• Improving our services

• Protecting our premises

• Operating CCTV systems

• Managing customer relationships

Consent

Where required, we will obtain your consent before sending marketing communications.

---

Payment Information

We do not store or have direct access to your full payment card details.

Payments are securely processed through trusted third-party payment providers who operate their own privacy and security procedures.

---

Sharing Your Information

We do not sell your personal information.

We may share information with:

• Payment processors

• Delivery and courier providers

• Website and e-commerce providers

• Professional advisers

• Accountants

• Insurers

• Regulatory authorities

• Law enforcement agencies where required

All third parties are required to protect your information and process it lawfully.

---

Data Retention

We retain personal information only for as long as necessary to:

• Fulfil orders

• Meet legal obligations

• Resolve disputes

• Maintain financial records

• Protect our legitimate business interests

Retention periods may vary depending on the nature of the information and legal requirements.

CCTV footage is routinely overwritten unless required for an investigation, insurance claim, legal matter, or security incident.

---

Cookies

Our website uses cookies to improve functionality, analyse website traffic, and enhance your experience.

Cookies may collect information about how you use our website.

You can manage or disable cookies through your browser settings, although doing so may affect website functionality.

---

Marketing Communications

If you choose to subscribe to marketing updates, we may send information about:

• New products

• Promotions

• Events

• Special offers

You may unsubscribe at any time by using the unsubscribe link or contacting us directly.

---

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion of your information

• Restrict processing

• Object to processing

• Request transfer of your data

• Withdraw consent where processing relies on consent

• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us.

---

Security

We take reasonable technical and organisational measures to protect your personal information against:

• Unauthorised access

• Accidental loss

• Misuse

• Disclosure

• Alteration

• Destruction

While no system can be guaranteed completely secure, we continually review our procedures to maintain appropriate protection.

---

Third-Party Websites

Our website may contain links to third-party websites, social media platforms, or external services.

We are not responsible for the privacy practices or content of third-party websites.

---

Children's Privacy

Our products and services are not specifically directed at children under the age of 13.

We do not knowingly collect personal information from children without appropriate parental involvement.

---

Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page and become effective immediately upon publication.

---

Contact Us

If you have any questions regarding this Privacy Policy or how your information is handled, please contact Fatal Bakehouse through the contact details provided on our website.

You also have the right to contact the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.

Fatal Bakehouse
Rich. Deadly. Unapologetically Indulgent.