Privacy notice
Last updated 26 August 2026
This explains what Mike Bakes London does with your personal information when you order from us or use this website. We are the data controller. You can contact us about anything here at info@mikebakes.uk or +44 7922 122149.
What we collect and why
| Information | Why we have it | Our lawful basis |
|---|---|---|
| Your name, email address and phone number | To confirm the order, send your receipt, and contact you about the delivery | Performance of a contract |
| Delivery address and postcode | To work out the delivery fee and bring the order to you | Performance of a contract |
| What you ordered, the date and the time window | To bake and deliver it, and to keep our own accounts | Performance of a contract, and legal obligation for tax records |
| Any message you ask us to pipe on a cake | To make the cake as you asked | Performance of a contract |
| Allergies and dietary needs you tell us about | So the kitchen knows before it bakes, and so we can tell you honestly whether we can serve you safely | Your explicit consent |
| Delivery notes you write, such as access instructions | To complete the delivery | Performance of a contract |
Allergy information is treated differently
Information about allergies is information about your health. UK GDPR calls this a special category of personal data and protects it more strictly than the rest.
- We only collect it if you choose to give it, and we ask you to tick a box confirming you are happy for us to hold it. That tick is your explicit consent under Article 9(2)(a).
- We use it for one purpose: making and delivering your food safely. We do not use it for marketing and we do not build a health profile of you.
- It is visible to the people who bake and deliver your order, and it is included on the order record so it is not lost between the website and the kitchen.
- You can withdraw your consent at any time by emailing us. We will delete the allergy information we hold. Withdrawing consent does not undo anything done before, and if you withdraw it before an order is baked we may need to ask you again or decline the order, because we will not bake for an allergy we are not allowed to record.
Sharing
We do not sell your information and we never share it for anyone else's marketing.
Like any online shop, we rely on a small number of suppliers to operate: a payment provider to take the payment, and providers who host the website, store the order and send your receipt. Each receives only what it needs to do that job, is contractually bound to act on our instructions, and cannot use your information for its own purposes. Where any of it is handled outside the UK, it is covered by approved safeguards such as the UK addendum to the EU standard contractual clauses.
We also use Google Analytics, which receives information about how this website is used, as described under cookies below. It does not receive your name, address or order details.
We will also share information where the law requires it, for example with environmental health or HMRC.
Card details
We never see your full card number. Payment is completed on our payment provider's own secure page, and your card details are never sent to this website or stored by us.
Cookies and what this website stores
This website does not use advertising cookies and we do not allow anyone to track you across other websites. Three things are stored in your browser:
- Your basket is kept in your own browser's local storage so it survives a refresh. It never leaves your device until you check out. Clearing your browser data removes it.
- A sign in cookie for the shop owner's admin area. It is not set for customers.
- Google Analytics cookies, which count visits so we can see how the shop is being used.
We use Google Analytics to understand which pages people look at and which cakes get attention, so we know what to bake and what to fix on the site. It records the pages you visit, roughly which part of the country you are in, the sort of device and browser you are using, and the website you arrived from. It does not tell us your name, and we do not use it for advertising or share it for anyone else's marketing.
Google Analytics leaves cookies in your browser whose names begin with _ga, and these last up to two years. Google processes this information on our instructions. If you would rather not be counted, you can block or delete cookies in your browser settings, or install Google's opt out browser add on. The shop works exactly the same either way, and nothing you need in order to place an order depends on it.
How long we keep it
- Order records, including what you bought and where it went, are kept for six years, because HMRC requires business records to be kept for that long.
- Allergy information is kept with the order it relates to, so we have a record of what we were told and what we did about it. Ask us and we will delete it sooner unless we are required to keep it.
- Emails you send us are kept for as long as needed to deal with the matter.
- Website analytics are kept by Google for the retention period set on our Google Analytics account, and the cookies it leaves in your browser expire after two years at the latest.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the information we hold about you
- correct anything that is wrong
- delete information we no longer have a reason to keep
- restrict or object to how we use it
- send it to you or another provider in a portable form
- withdraw consent for anything you consented to, including allergy information
Email info@mikebakes.uk and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can fix it.
Automated decisions
We do not make any decision about you by automated means alone. Our payment provider may run automated fraud checks on a payment as part of processing it.
Changes
If we change this notice we will update the date at the top. The terms you agreed to when ordering are the ones that applied on that day. See also our terms and conditions.