Privacy & Data Protection Policy

Last updated: 01/11/25

1. Introduction

Cakebole Orchard (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website https://cakeboleorchard.co.uk/ (the “Website”), make a purchase, or otherwise interact with us.

We act as the “data controller” for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following types of personal data about you:

a) Information you provide directly

When you make a purchase or create an account (name, billing/delivery address, email, phone number, payment details).
When you contact us by email, phone, or webform.
When you sign up for our newsletter or marketing communications.

b) Information collected automatically

When you browse the Website, we may automatically collect:

Technical data (IP address, browser type/version, device type, operating system).
Usage data (pages visited, time on site, referral source, interactions). We use cookies and similar technologies for this purpose (see section 8).

c) Information from third parties

We may receive limited personal data from third-party service providers such as payment processors, delivery companies, or analytics services, where permitted by law.

3. How We Use Your Information

We process your personal data for the following purposes:

Purpose	Lawful basis under UK GDPR
To process and deliver your order, including payment and shipping	Performance of a contract
To respond to your enquiries or customer service requests	Legitimate interests / contract
To send you service messages (order confirmations, delivery updates)	Performance of a contract
To send you marketing or promotional communications (if you opt in)	Consent
To improve and personalise our Website and services	Legitimate interests
To comply with legal or regulatory obligations	Legal obligation

We do not sell or rent your personal information to anyone.

4. Payment Processing

Payments on our Website are handled securely by third-party payment processors (for example, Stripe, PayPal, or similar services).

We do not store or have access to your full payment card details.

Each processor’s privacy policy will apply to the data they handle — please review their respective terms when paying.

5. Data Sharing

We may share your personal information only when necessary with:

Delivery and courier companies (to deliver your order).
Payment processors (to complete transactions).
IT service providers and website hosting partners (to operate the Website).
Legal or regulatory authorities (where required by law).

All partners who process your personal data on our behalf are bound by contracts that require them to keep it secure and use it only for the agreed purpose.

6. Data Retention

We keep your personal information only for as long as is necessary to fulfil the purposes for which we collected it, including for legal, accounting, or reporting requirements.

Typically:

Order and transaction data: 6 years (for tax/accounting).
Marketing contact details: until you withdraw consent or unsubscribe.
General correspondence: up to 2 years from last interaction.

When data is no longer required, it will be securely deleted or anonymised.

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access – to request a copy of your personal data we hold.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data (“right to be forgotten”).
Right to restrict processing – to limit how your data is used.
Right to data portability – to receive your data in a machine-readable format.
Right to object – to object to direct marketing or certain types of processing.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at the details below. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

8. Cookies

Our Website uses cookies and similar technologies to:

Ensure the site functions properly (essential cookies).
Analyse website traffic and improve performance (analytics cookies).
Remember your preferences and shopping basket contents.

You can manage or delete cookies through your browser settings.

More information is available in our separate Cookie Policy (or include this section within it if you prefer one combined document).

9. Data Security

We use appropriate technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. This includes SSL encryption, secure servers, password protection, and limited staff access.

While we take reasonable precautions, no online transmission or storage system can be guaranteed to be 100% secure.

10. International Data Transfers

Your personal data is stored and processed within the UK or the European Economic Area (EEA).

If we ever transfer data outside the UK/EEA (for example, via a cloud provider), we ensure equivalent protection is provided by appropriate safeguards (such as the UK’s International Data Transfer Agreement).

11. Children

Our Website is not intended for children under 16. We do not knowingly collect personal data from children.

If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

Any changes will be posted on this page with an updated “last revised” date.

Please check back periodically to stay informed.

13. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your personal data, please contact:

Cakebole Orchard Produce
Cakebole House
Chaddesley Corbett
Nr Kidderminster,
Worcestershire DY10 4RG
Email: annie@cakeboleorchard.co.uk

Summary

Cakebole Orchard Produce respects your privacy and is committed to transparency and data protection. We only collect what we need, use it responsibly, and keep it safe.