Privacy notice
Last updated 19 August 2026
This explains what Mike Bakes London does with your personal information when you order from us or use this website. We are the data controller. You can contact us about anything here at info@mikebakes.uk or +44 7922 122149.
What we collect and why
| Information | Why we have it | Our lawful basis |
|---|---|---|
| Your name, email address and phone number | To confirm the order, send your receipt, and contact you about the delivery | Performance of a contract |
| Delivery address and postcode | To work out the delivery fee and bring the order to you | Performance of a contract |
| What you ordered, the date and the time window | To bake and deliver it, and to keep our own accounts | Performance of a contract, and legal obligation for tax records |
| Any message you ask us to pipe on a cake | To make the cake as you asked | Performance of a contract |
| Allergies and dietary needs you tell us about | So the kitchen knows before it bakes, and so we can tell you honestly whether we can serve you safely | Your explicit consent |
| Delivery notes you write, such as access instructions | To complete the delivery | Performance of a contract |
Allergy information is treated differently
Information about allergies is information about your health. UK GDPR calls this a special category of personal data and protects it more strictly than the rest.
- We only collect it if you choose to give it, and we ask you to tick a box confirming you are happy for us to hold it. That tick is your explicit consent under Article 9(2)(a).
- We use it for one purpose: making and delivering your food safely. We do not use it for marketing and we do not build a health profile of you.
- It is visible to the people who bake and deliver your order, and it is included on the order record so it is not lost between the website and the kitchen.
- You can withdraw your consent at any time by emailing us. We will delete the allergy information we hold. Withdrawing consent does not undo anything done before, and if you withdraw it before an order is baked we may need to ask you again or decline the order, because we will not bake for an allergy we are not allowed to record.
Sharing
We do not sell your information and we never share it for anyone else's marketing.
Like any online shop, we rely on a small number of suppliers to operate: a payment provider to take the payment, and providers who host the website, store the order and send your receipt. Each receives only what it needs to do that job, is contractually bound to act on our instructions, and cannot use your information for its own purposes. Where any of it is handled outside the UK, it is covered by approved safeguards such as the UK addendum to the EU standard contractual clauses.
We will also share information where the law requires it, for example with environmental health or HMRC.
Card details
We never see your full card number. Payment is completed on our payment provider's own secure page, and your card details are never sent to this website or stored by us.
Cookies and what this website stores
This website does not use advertising cookies, analytics or third party trackers, which is why you are not asked to accept cookies. Two things are stored, both strictly necessary:
- Your basket is kept in your own browser's local storage so it survives a refresh. It never leaves your device until you check out. Clearing your browser data removes it.
- A sign in cookie for the shop owner's admin area. It is not set for customers.
How long we keep it
- Order records, including what you bought and where it went, are kept for six years, because HMRC requires business records to be kept for that long.
- Allergy information is kept with the order it relates to, so we have a record of what we were told and what we did about it. Ask us and we will delete it sooner unless we are required to keep it.
- Emails you send us are kept for as long as needed to deal with the matter.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the information we hold about you
- correct anything that is wrong
- delete information we no longer have a reason to keep
- restrict or object to how we use it
- send it to you or another provider in a portable form
- withdraw consent for anything you consented to, including allergy information
Email info@mikebakes.uk and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can fix it.
Automated decisions
We do not make any decision about you by automated means alone. Our payment provider may run automated fraud checks on a payment as part of processing it.
Changes
If we change this notice we will update the date at the top. The terms you agreed to when ordering are the ones that applied on that day. See also our terms and conditions.